last executing test programs: 2.622536809s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r5, &(0x7f00000001c0)=""/147, 0x93) 2.437928294s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 2.380769969s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 2.343805432s ago: executing program 4 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 2.012472199s ago: executing program 3 (id=9): mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x7}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) listen(r1, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.943078514s ago: executing program 3 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc09d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"/276], 0x114}, {&(0x7f00000005c0)={0x250, 0x16, 0x10, 0x70bd28, 0x25dfdbfb, "", [@generic="f93d2d82f86eb6b8052c9f42af0f0f59ce90d0d5303efd4ed368b8ca4796b93d1f33553f8310a1cc9e0676dd2e08a3183c99bdc061483ff71f197d060a5f8f2863c73b5241fcb24472fd7d47f1d27f7c67b024467d21f12350be6321e8b4f73de7b2598ec0e5b6263f25d39d9112a8d438a70d4a56c866fa73dae89e9e419b2418284bd099f6e014cf3583e73d65d19af583bd02f7ef9d3a882561a55f0c8b225ec2c58759864c2efbcf086f8c", @nested={0x8f, 0x53, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @fd=r0}, @generic="ee58e7ff4881d0b9bd71bdacf1f8b0e4c8ffa549417e1ce28229e1452eca4ba85ce0972c5b29c4af564712fb0b1393feced474908f24cfa4980b24eef2f63b734b734f24bab70dbc68b53a40ad8a32386aac4a5e2c5e2a4933e6cdd3ea9fba28fcd72da7c0a9878d143f9c0071d15ba927a8ecea40977ed6fc48adb6b32f63ee8f56cd"]}, @nested={0x57, 0xcd, 0x0, 0x1, [@nested={0x4, 0xfc}, @nested={0x4, 0x129}, @typed={0x9, 0x141, 0x0, 0x0, @str='(-(^\x00'}, @generic="2fe251ed2cb6efaca6bffe848cd27ddca63339cc17a5cb321d25a5454adb557d322c3361199565eb3dda86647764e19e8ef04d42ec183a40304d7d", @nested={0x4, 0x65}]}, @typed={0x8, 0xcd, 0x0, 0x0, @pid}, @generic, @generic="9fe2ac4040f66e9da6455f0cbdde0eba859024e0eec46d41a4919b7f9f4cdc0438406f9d399dd7133242b219756ccd71c565f7bc9a8745727958fc4a1e5a93f246210b986ac05278bd1db3187b89065d7846f4920749e0ec74265409b2b963ac125112cc5cf7ae6670a6efe92e86484daf2d73ead50787e9278417de661f5307543a0bbf84ad6a0b07a51184665301b5e25cdf49208a107721be58aca7926102472693"]}, 0x250}], 0x2, 0x0, 0x0, 0x1}, 0x4000040) 1.87597194s ago: executing program 3 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x3f, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2814002, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x9d) write$P9_RREADLINK(r6, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', r6, 0x4000, r7}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000000000000080000000000000000"], 0x0, 0x1a}, 0x28) 1.87542934s ago: executing program 1 (id=13): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = msgget(0x2, 0x600) msgrcv(r3, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x6, 0x800) msgrcv(r3, &(0x7f0000000000)={0x0, ""/237}, 0xf5, 0x0, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.815759754s ago: executing program 2 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000800)="01", 0x1, 0x4004014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.74520884s ago: executing program 2 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000c73800000004000009"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.216288362s ago: executing program 4 (id=16): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x560d, 0x3) 1.215942282s ago: executing program 4 (id=17): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x18) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 938.091765ms ago: executing program 2 (id=18): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 937.649325ms ago: executing program 3 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x1, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000300)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 847.548692ms ago: executing program 0 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) open(0x0, 0x1850c2, 0x14c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 768.267008ms ago: executing program 3 (id=21): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x6}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 767.871338ms ago: executing program 3 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2ce, 0x0, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x400c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}, @TCA_CAKE_MPU={0x8, 0xe, 0x2e}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x4c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 267.948518ms ago: executing program 2 (id=23): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 227.731502ms ago: executing program 2 (id=24): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff08) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) 0s ago: executing program 2 (id=25): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) setpriority(0x2, 0x0, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02140907070000002abd7000fedbdf25050005002b8000000a004e2000000788fe80000000000000000000000000001905000000000000003328d45f84d3756a827414950af16927d0b9ec564d3c1d4741f1fb4f858273f3e457e2b3b3c9fdccad074659a9633baded905b74c26223aee11b61bf7c63c6e9b04a5ad55908ed70848aa9fa3be4fa001a9ab9c0f4729d020ac44e"], 0x38}}, 0x4000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 32.251935][ T4033] cgroup: Unknown subsys name 'net' [ 32.521008][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.799965][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.165737][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 34.188375][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 34.219479][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.220712][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.222249][ T4043] device bridge_slave_0 entered promiscuous mode [ 34.236734][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.237974][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.240937][ T4043] device bridge_slave_1 entered promiscuous mode [ 34.253506][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.255214][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 34.270797][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.287590][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.288976][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.290441][ T4047] device bridge_slave_0 entered promiscuous mode [ 34.293558][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.294730][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.296193][ T4047] device bridge_slave_1 entered promiscuous mode [ 34.297646][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 34.303915][ T4043] team0: Port device team_slave_0 added [ 34.317782][ T4043] team0: Port device team_slave_1 added [ 34.325287][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.334288][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.335478][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.336944][ T4049] device bridge_slave_0 entered promiscuous mode [ 34.341939][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.348742][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.349814][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.353591][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.358313][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.359645][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.361115][ T4049] device bridge_slave_1 entered promiscuous mode [ 34.372612][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.373726][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.377888][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.391349][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.392537][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.394201][ T4048] device bridge_slave_0 entered promiscuous mode [ 34.399544][ T4047] team0: Port device team_slave_0 added [ 34.401930][ T4047] team0: Port device team_slave_1 added [ 34.410497][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.411604][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.413204][ T4048] device bridge_slave_1 entered promiscuous mode [ 34.415767][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.439595][ T4043] device hsr_slave_0 entered promiscuous mode [ 34.488289][ T4043] device hsr_slave_1 entered promiscuous mode [ 34.551670][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.556059][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.557263][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.564075][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.566166][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 34.572494][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.574331][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.575506][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.579779][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.587077][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.596082][ T4049] team0: Port device team_slave_0 added [ 34.607897][ T4049] team0: Port device team_slave_1 added [ 34.627087][ T4048] team0: Port device team_slave_0 added [ 34.637318][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.641401][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.645767][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.648760][ T4048] team0: Port device team_slave_1 added [ 34.699083][ T4047] device hsr_slave_0 entered promiscuous mode [ 34.738369][ T4047] device hsr_slave_1 entered promiscuous mode [ 34.778176][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.779333][ T4047] Cannot create hsr debugfs directory [ 34.789102][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.790132][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.794004][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.809884][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.811109][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.812688][ T4051] device bridge_slave_0 entered promiscuous mode [ 34.823426][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.824706][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.826251][ T4051] device bridge_slave_1 entered promiscuous mode [ 34.827792][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.829118][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.833213][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.842446][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.843675][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.847896][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.867705][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.909247][ T4049] device hsr_slave_0 entered promiscuous mode [ 34.968292][ T4049] device hsr_slave_1 entered promiscuous mode [ 35.018188][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.019484][ T4049] Cannot create hsr debugfs directory [ 35.021233][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.041194][ T4051] team0: Port device team_slave_0 added [ 35.079219][ T4048] device hsr_slave_0 entered promiscuous mode [ 35.118308][ T4048] device hsr_slave_1 entered promiscuous mode [ 35.158209][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.159421][ T4048] Cannot create hsr debugfs directory [ 35.170842][ T4051] team0: Port device team_slave_1 added [ 35.190281][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.191438][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.195497][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.206837][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.207970][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.212839][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.299247][ T4051] device hsr_slave_0 entered promiscuous mode [ 35.338531][ T4051] device hsr_slave_1 entered promiscuous mode [ 35.378249][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.379402][ T4051] Cannot create hsr debugfs directory [ 35.382958][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.429284][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.480215][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.522751][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.612141][ T4047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.631246][ T4047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.683453][ T4047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.719206][ T4047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.761517][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.810273][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.872233][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.910440][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.002536][ T4051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.054929][ T4051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.088506][ T4089] Bluetooth: hci3: command 0x0409 tx timeout [ 36.089648][ T4089] Bluetooth: hci2: command 0x0409 tx timeout [ 36.090544][ T4089] Bluetooth: hci1: command 0x0409 tx timeout [ 36.091829][ T4084] Bluetooth: hci0: command 0x0409 tx timeout [ 36.096116][ T4051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.123671][ T4051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.161582][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.168244][ T4110] Bluetooth: hci4: command 0x0409 tx timeout [ 36.176066][ T4048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.211169][ T4048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.259547][ T4048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.303054][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.309036][ T4048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.361702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.363798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.365022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.366522][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.375796][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.377664][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.384110][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.385688][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.387265][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.388527][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.392039][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.401744][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.404482][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.406212][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.407915][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.409078][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.411547][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.413124][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.414506][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.415573][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.416992][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.418943][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.420406][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.421532][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.422957][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.424625][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.435065][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.442585][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.444353][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.446200][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.447947][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.452979][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.462527][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.464214][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.465955][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.467389][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.469508][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.471370][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.472938][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.475620][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.487955][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.491826][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.493476][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.495056][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.496624][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.497905][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.499020][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.501137][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.502731][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.504129][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.505145][ T1607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.506563][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.509066][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.512730][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.514176][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.522536][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.524082][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.525482][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.526999][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.529400][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.532222][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.542163][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.543927][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.545536][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.547112][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.550239][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.551794][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.553261][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.554749][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.556965][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.561269][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.573017][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.577335][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.579757][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.582602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.584256][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.587061][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.595849][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.600130][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.601719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.603238][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.604433][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.605953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.614051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.615710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.617173][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.618255][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.624203][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.636978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.639298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.640684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.642203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.643784][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.644786][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.646070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.647484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.650107][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.651232][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.652516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.654057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.663844][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.666882][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.668557][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.669814][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.678996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.680726][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.695566][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.696911][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.698967][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.700538][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.702144][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.703897][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.705532][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.707256][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.713150][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.714569][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.717056][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.723881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.725472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.734509][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.736018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.741275][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.742799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.744669][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.745863][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.755246][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.756730][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.758498][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.760107][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.763219][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.764903][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.775747][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.777284][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.779255][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.780791][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.782352][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.783920][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.785469][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.786865][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.790991][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.792800][ T4047] device veth0_vlan entered promiscuous mode [ 36.812743][ T4047] device veth1_vlan entered promiscuous mode [ 36.820964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.822427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.823990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.825723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.827081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.835697][ T4043] device veth0_vlan entered promiscuous mode [ 36.842630][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.843956][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.845572][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.862052][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.863685][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.866260][ T4043] device veth1_vlan entered promiscuous mode [ 36.868074][ T4047] device veth0_macvtap entered promiscuous mode [ 36.875310][ T4049] device veth0_vlan entered promiscuous mode [ 36.876987][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.878506][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.879927][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.881405][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.883056][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.884938][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.890879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.892237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.899218][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.902916][ T4047] device veth1_macvtap entered promiscuous mode [ 36.904668][ T4049] device veth1_vlan entered promiscuous mode [ 36.910873][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.915824][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.917298][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.919687][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.921227][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.922391][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.937588][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.941181][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.942701][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.944225][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.945684][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.947256][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.956104][ T4043] device veth0_macvtap entered promiscuous mode [ 36.958514][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.960065][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.961701][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.963272][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.964726][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.971916][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.975196][ T4043] device veth1_macvtap entered promiscuous mode [ 36.976563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.978073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.981164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.983670][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.984932][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.986143][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.987394][ T4047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.991533][ T4049] device veth0_macvtap entered promiscuous mode [ 36.996427][ T4048] device veth0_vlan entered promiscuous mode [ 36.997831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.999391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.000932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.004331][ T4049] device veth1_macvtap entered promiscuous mode [ 37.005857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.007940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.010554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.019620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.021320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.024300][ T4048] device veth1_vlan entered promiscuous mode [ 37.027400][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.029913][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.032548][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.040209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.041763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.043353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.047279][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.050206][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.051719][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.053311][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.055480][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.064252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.065747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.067140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.072636][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.074235][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.076255][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.079525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.081109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.095013][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.096501][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.097868][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.100064][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.102173][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.103705][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.105296][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.106842][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.110332][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.114771][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.116066][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.117458][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.119678][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.122260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.123806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.136892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.138463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.140070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.141438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.143498][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.144753][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.146377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.153829][ T4051] device veth0_vlan entered promiscuous mode [ 37.161832][ T4051] device veth1_vlan entered promiscuous mode [ 37.170323][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.171867][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.173377][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.174899][ T350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.176338][ T350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.180073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.184474][ T4048] device veth0_macvtap entered promiscuous mode [ 37.187436][ T4048] device veth1_macvtap entered promiscuous mode [ 37.225551][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.227199][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.229516][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.231070][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.233216][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.237203][ T350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.241169][ T4153] udc-core: couldn't find an available UDC or it's busy [ 37.242399][ T4153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.242852][ T350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.245348][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.258704][ T350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.259966][ T350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.260354][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.262705][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.264205][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.265884][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.267505][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.272537][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.274697][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.277306][ T4051] device veth0_macvtap entered promiscuous mode [ 37.279779][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.281282][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.282688][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.284208][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.286753][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.289784][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.291335][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.292944][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.294513][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.295990][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.298005][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.304689][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.306303][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.309840][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.311088][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.311248][ T4048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.313575][ T4048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.314957][ T4048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.316266][ T4048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.323125][ T4051] device veth1_macvtap entered promiscuous mode [ 37.324729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.341960][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.343321][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.354525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.392876][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.394075][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.398733][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.400440][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.403812][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.418136][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.419702][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.421427][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.423045][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.423837][ T4157] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 37.425907][ T4157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.428620][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.430583][ T4157] vhci_hcd vhci_hcd.0: Device attached [ 37.435831][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.437992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.439827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.441782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.443896][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.445658][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.447200][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.452473][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.454192][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.455763][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.457362][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.459881][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.462116][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.468775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.470419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.476385][ T4051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.477808][ T4051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.479770][ T4051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.481200][ T4051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.484062][ T4158] vhci_hcd: connection closed [ 37.485556][ T1607] vhci_hcd: stop threads [ 37.487124][ T1607] vhci_hcd: release socket [ 37.487776][ T1607] vhci_hcd: disconnect device [ 37.495754][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.497539][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.500686][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.541150][ T4163] udc-core: couldn't find an available UDC or it's busy [ 37.542192][ T350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.543023][ T4163] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.543462][ T350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.546416][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.565171][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.566531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.568098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.641384][ T4166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 37.642343][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.644403][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 37.938570][ T4089] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 38.033843][ T4179] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 38.168656][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 38.170270][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 38.183152][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 38.187095][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 38.191670][ T4169] vhci_hcd: connection reset by peer [ 38.192932][ T9] vhci_hcd: stop threads [ 38.193885][ T9] vhci_hcd: release socket [ 38.194946][ T9] vhci_hcd: disconnect device [ 38.317356][ T4189] 9pnet_virtio: no channels available for device syz [ 38.589609][ T4084] Bluetooth: hci4: command 0x041b tx timeout [ 38.996086][ T4204] ODEBUG: Out of memory. ODEBUG disabled [ 39.095186][ T4209] udc-core: couldn't find an available UDC or it's busy [ 39.096398][ T4209] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.050357][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.050386][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0x60dd [ 40.051573][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0x2ff [ 40.052419][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 40.052703][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xfd60 [ 40.055198][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0x2ff [ 40.056375][ T4055] ================================================================== [ 40.058749][ T4055] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xcbc/0x3010 [ 40.059963][ T4055] Read of size 1 at addr ffff0000d6aa7c00 by task kworker/u5:4/4055 [ 40.061251][ T4055] [ 40.061650][ T4055] CPU: 0 PID: 4055 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 40.063107][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.064839][ T4055] Workqueue: hci2 hci_rx_work [ 40.065574][ T4055] Call trace: [ 40.066047][ T4055] dump_backtrace+0x0/0x43c [ 40.066782][ T4055] show_stack+0x2c/0x3c [ 40.067471][ T4055] __dump_stack+0x30/0x40 [ 40.068147][ T4055] dump_stack_lvl+0xf8/0x160 [ 40.068901][ T4055] print_address_description+0x78/0x30c [ 40.069834][ T4055] kasan_report+0xec/0x15c [ 40.070512][ T4055] __asan_report_load1_noabort+0x44/0x50 [ 40.071446][ T4055] hci_le_meta_evt+0xcbc/0x3010 [ 40.072227][ T4055] hci_event_packet+0xd10/0x11bc [ 40.072979][ T4055] hci_rx_work+0x1cc/0x880 [ 40.073682][ T4055] process_one_work+0x79c/0x1140 [ 40.074466][ T4055] worker_thread+0x8f4/0x101c [ 40.075169][ T4055] kthread+0x374/0x454 [ 40.075814][ T4055] ret_from_fork+0x10/0x20 [ 40.076477][ T4055] [ 40.076811][ T4055] Allocated by task 4230: [ 40.077523][ T4055] __kasan_kmalloc+0xb0/0xf0 [ 40.078300][ T4055] __kmalloc_node_track_caller+0x234/0x3bc [ 40.079287][ T4055] kmalloc_reserve+0xe4/0x26c [ 40.080011][ T4055] __alloc_skb+0x23c/0x67c [ 40.080747][ T4055] vhci_write+0xb8/0x3ac [ 40.081406][ T4055] vfs_write+0x7c8/0xa2c [ 40.082145][ T4055] ksys_write+0x120/0x210 [ 40.082867][ T4055] __arm64_sys_write+0x7c/0x90 [ 40.083615][ T4055] invoke_syscall+0x98/0x2b8 [ 40.084302][ T4055] el0_svc_common+0x138/0x258 [ 40.085001][ T4055] do_el0_svc+0x58/0x14c [ 40.085693][ T4055] el0_svc+0x78/0x1e0 [ 40.086342][ T4055] el0t_64_sync_handler+0xcc/0xe4 [ 40.087216][ T4055] el0t_64_sync+0x1a0/0x1a4 [ 40.087992][ T4055] [ 40.088377][ T4055] The buggy address belongs to the object at ffff0000d6aa7800 [ 40.088377][ T4055] which belongs to the cache kmalloc-1k of size 1024 [ 40.090637][ T4055] The buggy address is located 0 bytes to the right of [ 40.090637][ T4055] 1024-byte region [ffff0000d6aa7800, ffff0000d6aa7c00) [ 40.092827][ T4055] The buggy address belongs to the page: [ 40.093675][ T4055] page:00000000a260ac5d refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116aa0 [ 40.095287][ T4055] head:00000000a260ac5d order:3 compound_mapcount:0 compound_pincount:0 [ 40.096592][ T4055] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 40.097856][ T4055] raw: 05ffc00000010200 fffffc0003609000 0000000200000002 ffff0000c0002780 [ 40.099362][ T4055] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 40.100856][ T4055] page dumped because: kasan: bad access detected [ 40.101940][ T4055] [ 40.102325][ T4055] Memory state around the buggy address: [ 40.103259][ T4055] ffff0000d6aa7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.104490][ T4055] ffff0000d6aa7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.105866][ T4055] >ffff0000d6aa7c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.107091][ T4055] ^ [ 40.107707][ T4055] ffff0000d6aa7c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.109156][ T4055] ffff0000d6aa7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.110437][ T4055] ================================================================== [ 40.111680][ T4055] Disabling lock debugging due to kernel taint [ 40.128295][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.128315][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.129539][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.130697][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.131840][ T4055] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 40.248248][ T4151] Bluetooth: hci3: command 0x040f tx timeout [ 40.250145][ T4151] Bluetooth: hci2: command 0x040f tx timeout [ 40.251031][ T4151] Bluetooth: hci1: command 0x040f tx timeout [ 40.251874][ T4151] Bluetooth: hci0: command 0x040f tx timeout [ 40.648354][ T4084] Bluetooth: hci4: command 0x040f tx timeout [ 42.328272][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 42.329479][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 42.330490][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 42.331474][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 42.738223][ T3625] Bluetooth: hci4: command 0x0419 tx timeout [ 43.058554][ T4089] vhci_hcd: vhci_device speed not set