last executing test programs: 11.011509446s ago: executing program 2 (id=118): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x9], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 10.80778171s ago: executing program 2 (id=122): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) 7.804794724s ago: executing program 2 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}}], 0x2, 0x4040081) socketpair$unix(0x1, 0x5, 0x0, 0x0) 7.567915039s ago: executing program 2 (id=136): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000001d00)=[{&(0x7f0000000100)=""/234, 0xea}], 0x1) 7.483843601s ago: executing program 2 (id=138): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 7.400025293s ago: executing program 2 (id=141): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) 6.204032938s ago: executing program 4 (id=150): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 5.888875924s ago: executing program 4 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010029bd7000800001000a"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.785816407s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42248}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x9}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0x48}}, 0x20044080) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r2 = epoll_create(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xfffffffd, 0x1}]}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000009b80)={0x40000012}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000ffffff7f000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c0001007061796c6f6164001c0002800800034000000092080002400000000108000440000000000800034000000002080002400000008408000140000000100900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000008c0)={0x8, 0xd000, 0x0, r1, 0x8}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000840)=0x0) sched_setscheduler(r8, 0x5, &(0x7f0000000880)=0x4) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xcd}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) syz_usb_connect(0x3, 0x47f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000216d89e086307151005f50102030109026d0403040910f909040dbc00fffdba070824060001d27f1705240030060d240f0102000000030000080806241a08002307240a040307ffad2413045a5a894db204f377fcde5a80e23ec1619225f22f41e099b62d7033307f41f0d4bf3323b62a6e1696b2574f788a4387e218be3876c73a0f9a0b3076dc9d8b4e4313036091f3ad7c0be3af59445df8cff0889c6790ce1741ec282246dd559cf20b8d4246548475b94e8eb52f7d15e52e9035197f39c2b2d255af794a247cb82082decc7338c3beb37a921f4cb4977537c29690bb901d543e128a36b69c96599ec0e9baf6a40e6abe072414070001000904920400c8cf650211240202100005000e67911bef56cf9bb909240201075706060609240201fe067a0f400a240202030007000e31072401070200000b240600014a0c99feb9560524009c000d240f0100040000090004000106241afcff0108241c08000a00140e240708f7ff050008000700db0a0c241b050001017f0808000309049304074e3a8404092406000075592f7405240006000d240f010300000006008100011524124000a317a88b045e4f01a607c0ffcb7e392a1524123400a317a88b045e4f01a607c0ffcb7e392a09050e0000040206050725010400000009050608200006ff0634237c4b9f69e13077f2bd29e062e177aa3c634168955c09cd5c10e12f352230eb3ae494d52c310b7146393f8e23ef274e8b60480130447d92afc7bfa5e85537342594d089edde1f1ed4c18ba5d6b31f6bb81c1cab6f47a09e820f4d6be220beab4cc505305c256e2666af57d42c1e49551b314a70c51c6f0e33789cbed17ca9a93888fc9cc8a0e953b0879f2fc41162d4f2ac66c0cbbe09d6f21150f7d9256a61268845b2181996407403af264d6db9e7118542fc4e21e2c370cf180acd823c27f8855547c4b90c2675bd6fbc5ba756a0c8f2359cb2359bea77ddb881eb0a7e229eefc5412871dc1baf5d868e7fc8bc0f1fe65d30e679f6b4b0f088f73dcb5cbc4d39c97b4a99b9e6fac6e0262dcfe7a12b7a229643078c9f10ecbaaf16e7f81c7ecfcca27620ba0f828234e946bcab8900e0e2c209058002ff030a8906b921b9d9d78b8637ce02e695ec7f0d1ad5e40f38b9f5a7aa14710c8b5b1ea20650313dc1d956f2385f6e15da620ea53d3bf77576cf632bc3826c6eeb675772459416b80245e003107dea8ea38dd519e16c55f37e82ea4b01bbc7fa224dc857a7310912b9d3f096223c2580ffbe6d2213526d21354f6b46bf41019a53ae96144c67a0f5d75035330e7b5b64abf41aecd81279156d48b3d674bf8ab44d6a921314638bd5bced130aaa485c0c526d2ffad4503dbfb57653aa0a1b09050300000281040d0725010c080b000725010000960b0905800008008108ba0725010c04f10e0725010409470009050002ff03ae000409050c102000f90977590b07e858948f32370ae0e4ce17cb6dd867e387e1ebed04353644107803cacafc9cf3da39653b9d066ae3b237e37693d1f8898cd821f4c26d413a62d145bdce735607f9693ed0c33c4804a1d27ae7aefba8f2efd425cbd20c072501000451000000"], &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x0, 0x25, 0x6, 0x20, 0xe1}, 0x43, &(0x7f00000009c0)={0x5, 0xf, 0x43, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x1, 0x3, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x6}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "9a3dc0494e4a373d6502cf3259d3d521"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x3, 0x0, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2f, 0x15, 0x4}]}, 0x4, [{0xf2, &(0x7f0000000580)=ANY=[@ANYBLOB="f2037b48aace0d19de69ddf211b7e7d739a6b66661dfd2b35187fb6fbd1a157343758a18ad6495922c7a69fd3de5509a72c308c952f5baeaf46828d3621858f97bacd5bb37a1419a208aa1ade3a1c12851b36a02c0dc9dc8610e163af7a6ebc94ad00b27989d9272cf625782106dd951ee01c642500f7d96a93ae79866468335b14415336f565dc639035492f5cff2319c749810b129e3c87e561c3126bbc49221adde56668493981c41326e15e8457be80c2d8c8497b708233cc381d07c791d43a9483e7dc4a2594a429f91e9b3427c3724eb05"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x401}}, {0xac, &(0x7f00000006c0)=ANY=[@ANYBLOB="ac036a229ad70705e14a624d4d4bdc848c7c278f971291ed37a9a87e8ddd6a96048f343cab644d4581ae515a2f9387a8996ddd46e9c496dd5f1de86b7debc1099b3448c63569898e75a2bad842cbdf552c08985c69727e77a0b8d3951cd486c53eb34d847360352afed4b8652aa18202d8a839e14e9a8f8eda9aeea48cdc0d321abf58727b232ac4753df9024c6bce05eba5f7213a331c4683668e1b82bcf1cd097a0c9c902e56819d39ba00"]}, {0xa1, &(0x7f0000000900)=@string={0xa1, 0x3, "169b8bdda66bb7b19cf1c0f2bdac25c325a83c3e3081d106450a70000ff3e43e2bf4176bf8e3f6b493a26804fef19ce709d87e24a8283c0c5d9eb0aa3b34f94399594279d682614ba789b356f456c490ec82ca0ed002c54bf4b433144e670c3f53f659a27d96d1874706e5332be6caa1a26a9ecc85481acbc463d0e8c35ab041461e42a99beda23b08b559b52eee2b0baf4e7adcc09deba97e6f34bccaee4b"}}]}) 4.548062963s ago: executing program 1 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xfffffb5b, 0x0, 0xd, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.479474485s ago: executing program 3 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x4) 4.444979895s ago: executing program 1 (id=160): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000200), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0xeb, 0x4, 0x0, 0xfc, 0x6c, 0x65, 0x4}}]}}]}}, 0x0) 4.375334777s ago: executing program 3 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, 0x0, 0x0, 0x41) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="0ca946", 0x3}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048015) 4.321429078s ago: executing program 3 (id=162): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) 4.26009051s ago: executing program 3 (id=163): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x122, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) 4.119656302s ago: executing program 3 (id=164): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(0x0, 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.323728209s ago: executing program 3 (id=165): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x11b6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e640000000800024000000010140000001000010000000000000000000500000a25d9ccab7ce4521b437e6aa990"], 0xf8}}, 0x0) 2.498987107s ago: executing program 4 (id=168): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 2.280337681s ago: executing program 0 (id=170): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/81, 0x0, 0x25000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x7000, 0x8b, &(0x7f0000000500)=""/139}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 2.232065822s ago: executing program 4 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 2.231543413s ago: executing program 1 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x1164, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1134, 0x2, [@TCA_TCINDEX_ACT={0x1130, 0x7, [@m_xt={0x154, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x128, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}]}, {0xd1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x27e}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x4, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x2}, {0xf, 0x5, 0x80, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x7, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x800005, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1164}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.121754784s ago: executing program 4 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355", 0xb4}, {&(0x7f0000000540)="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", 0x618}], 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.080406296s ago: executing program 1 (id=174): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) 2.015827277s ago: executing program 0 (id=175): sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x5) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.929343619s ago: executing program 0 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) 1.703172864s ago: executing program 0 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000080000000090a01040000000000000100070000000900010073797a3000000000440011800a0001006d61746368000000340002801c0003004ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a0a00010071756f74610000000800024000000000080005400000000208000a4000000001090002"], 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 920.09887ms ago: executing program 1 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) 202.498496ms ago: executing program 1 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2, 0x3b}, 0x10) 150.898756ms ago: executing program 0 (id=180): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000240)="c657d4b8627bf031b662b3df7c8027814904da5b", 0x14}], 0x2}, 0x40011) 0s ago: executing program 0 (id=181): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) connect$pppl2tp(r2, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 61.899243][ T4172] cgroup: Unknown subsys name 'net' [ 62.047294][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.562377][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.985835][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.092457][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.100225][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.109673][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.140092][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.157424][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.170948][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.187828][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.229844][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 65.247592][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.278518][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.293359][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.318715][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.371354][ T4191] team0: Port device team_slave_0 added [ 65.403543][ T4191] team0: Port device team_slave_1 added [ 65.409450][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.416731][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.428453][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.465040][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.472874][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.481099][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.515659][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.522937][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.548965][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.571493][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.578588][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.587085][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.601710][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.608692][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.634973][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.650130][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.657358][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.666266][ T4193] device bridge_slave_0 entered promiscuous mode [ 65.674869][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.684163][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.692726][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.701679][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.721498][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.728691][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.737538][ T4193] device bridge_slave_1 entered promiscuous mode [ 65.753347][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.779012][ T4195] team0: Port device team_slave_0 added [ 65.798235][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.805554][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.813996][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.827929][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.836074][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.844311][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.859378][ T4195] team0: Port device team_slave_1 added [ 65.874294][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.885941][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.920258][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.938115][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.949557][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.963652][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.974513][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.002507][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.019872][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.026975][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.053306][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.067732][ T4187] team0: Port device team_slave_0 added [ 66.088433][ T4188] team0: Port device team_slave_0 added [ 66.095372][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.102801][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.128807][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.141249][ T4187] team0: Port device team_slave_1 added [ 66.166111][ T4188] team0: Port device team_slave_1 added [ 66.182753][ T4193] team0: Port device team_slave_0 added [ 66.213439][ T4193] team0: Port device team_slave_1 added [ 66.226744][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.233790][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.259995][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.278026][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.285981][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.312054][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.340670][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.347850][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.373943][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.390118][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.397196][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.423250][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.438447][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.445270][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.451958][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.459702][ T4195] Cannot create hsr debugfs directory [ 66.487170][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.494449][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.520570][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.536092][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.543878][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.569954][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.645528][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.652524][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.659520][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.668046][ T4193] Cannot create hsr debugfs directory [ 66.692814][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.699901][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.706734][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.714949][ T4187] Cannot create hsr debugfs directory [ 66.724279][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.731563][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.738502][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.746231][ T4188] Cannot create hsr debugfs directory [ 66.761553][ T4176] Bluetooth: hci1: command 0x0409 tx timeout [ 66.761553][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 66.762654][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 66.822070][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 66.828149][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 67.061553][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.077934][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.099775][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.119435][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.139423][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.149606][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.167920][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.178085][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.249486][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.264954][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.302719][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.315836][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.342230][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.352878][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.363330][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.398416][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.422892][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.444577][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.456033][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.468424][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.479329][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.492117][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.506497][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.516345][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.526029][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.558810][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.568252][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.578380][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.585690][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.595196][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.606519][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.615245][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.622368][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.630136][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.643887][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.653254][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.680229][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.689795][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.701112][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.710579][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.720381][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.738175][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.760681][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.770333][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.782724][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.790004][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.798996][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.808756][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.819251][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.828003][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.835119][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.850546][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.859535][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.884569][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.895948][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.905853][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.916309][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.939017][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.948851][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.958229][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.997291][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.006904][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.015895][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.024639][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.035475][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.044461][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.068018][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.078899][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.091937][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.105336][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.115449][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.140693][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.167788][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.178656][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.188097][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.196338][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.208935][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.226053][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.233246][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.247650][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.255748][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.276722][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.289669][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.299256][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.312839][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.322040][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.330550][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.337771][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.346214][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.356553][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.365747][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.372891][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.386533][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.394713][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.403933][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.435214][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.452561][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.465875][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.473031][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.484560][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.492860][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.501432][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.510298][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.521328][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.544016][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.553609][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.566959][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.577613][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.590443][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.607764][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.617662][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.632468][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.663806][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.678689][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.717825][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.726557][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.741993][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.750596][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.757737][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.766943][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.776403][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.785021][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.792157][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.800113][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.810406][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.819061][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.827868][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.837794][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.845978][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 68.852353][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 68.859213][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.867121][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 68.870331][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.873338][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 68.887500][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 68.895290][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.903999][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.911726][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.919215][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.929062][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.954362][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.969008][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.996616][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.007015][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.024026][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.038758][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.056758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.066611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.082358][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.089874][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.116703][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.147225][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.179895][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.189560][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.204694][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.216037][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.228837][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.247056][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.263724][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.281986][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.296417][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.315688][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.332109][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.351429][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.377347][ T4191] device veth0_vlan entered promiscuous mode [ 69.403864][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.419027][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.427155][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.434811][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.456351][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.475198][ T4191] device veth1_vlan entered promiscuous mode [ 69.506558][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.521630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.538597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.546279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.563232][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.572302][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.581685][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.617697][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.625503][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.637971][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.647418][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.662703][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.711071][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.719429][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.733267][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.742598][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.751924][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.761294][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.770019][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.778319][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.787238][ T4195] device veth0_vlan entered promiscuous mode [ 69.796814][ T4191] device veth0_macvtap entered promiscuous mode [ 69.818691][ T4187] device veth0_vlan entered promiscuous mode [ 69.837327][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.846821][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.855571][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.865047][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.873869][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.886805][ T4195] device veth1_vlan entered promiscuous mode [ 69.896582][ T4188] device veth0_vlan entered promiscuous mode [ 69.910673][ T4191] device veth1_macvtap entered promiscuous mode [ 69.922129][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.932150][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.940286][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.948956][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.957548][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.966338][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.983493][ T4187] device veth1_vlan entered promiscuous mode [ 70.006286][ T4188] device veth1_vlan entered promiscuous mode [ 70.034995][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.060276][ T4195] device veth0_macvtap entered promiscuous mode [ 70.079231][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.089012][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.097979][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.106664][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.115750][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.126493][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.136016][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.146386][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.155838][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.170198][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.198668][ T4195] device veth1_macvtap entered promiscuous mode [ 70.219860][ T4187] device veth0_macvtap entered promiscuous mode [ 70.227640][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.237780][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.246168][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.255150][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.265799][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.276043][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.285007][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.297474][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.307401][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.316526][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.326224][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.346483][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.358340][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.373007][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.388750][ T4188] device veth0_macvtap entered promiscuous mode [ 70.398306][ T4187] device veth1_macvtap entered promiscuous mode [ 70.411961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.435968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.445307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.454248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.465133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.477525][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.488528][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.503682][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.515668][ T4188] device veth1_macvtap entered promiscuous mode [ 70.531438][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.540050][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.548834][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.564123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.573478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.583662][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.595864][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.607084][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.618499][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.630028][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.646260][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.657995][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.667131][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.676181][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.688258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.697922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.711417][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.722171][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.732353][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.743197][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.754918][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.795410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.806687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.847527][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.859010][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.869806][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.881557][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.891961][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.902520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.914049][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.922141][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 70.928599][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 70.935105][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 70.941604][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 70.947731][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 70.964928][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.975746][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.984715][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.994170][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.005351][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.013623][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.024392][ T4193] device veth0_vlan entered promiscuous mode [ 71.038078][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.047057][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.056284][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065319][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.085851][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.088743][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.094250][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.114925][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.125422][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.136130][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.146371][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.157057][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.168318][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.184623][ T4193] device veth1_vlan entered promiscuous mode [ 71.201267][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.209520][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.219024][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.228235][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.237368][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.265281][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.274888][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.286889][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.295915][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.348261][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.357189][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.381682][ T4193] device veth0_macvtap entered promiscuous mode [ 71.405899][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412840][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424130][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.434490][ T4193] device veth1_macvtap entered promiscuous mode [ 71.456074][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.464615][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.484436][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.492325][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.513449][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.523728][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.589097][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.599930][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.615824][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.626573][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.649167][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.664320][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.677318][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.687954][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.700086][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.732760][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.744968][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.759105][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.792025][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804992][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.818546][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.834569][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.834592][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.834614][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.834626][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.834645][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.852826][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.901565][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.921915][ T3083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.923606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.946352][ T3083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.954455][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.965374][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.974155][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.983701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.997118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.010397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.019824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.045961][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.073429][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.082813][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.095857][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.124951][ T4267] kvm [4266]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 72.137879][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.153973][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.181521][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.188275][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.189501][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.274627][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.343175][ T4273] loop0: detected capacity change from 0 to 16 [ 72.401590][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.409469][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.448728][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.461406][ T4273] erofs: (device loop0): mounted with root inode @ nid 36. [ 72.497611][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.515388][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.551175][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.759108][ T4282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 72.871007][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.879074][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 72.882913][ T4204] Bluetooth: hci2: ACL packet for unknown connection handle 3584 [ 73.068946][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 73.075209][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 73.084002][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 73.090140][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 73.096272][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 74.020082][ T4265] usb 4-1: Using ep0 maxpacket: 32 [ 74.049094][ T4284] sctp: failed to load transform for md5: -2 [ 74.151072][ T4265] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 74.331500][ T4265] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 74.357609][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 74.370942][ T4265] usb 4-1: Product: syz [ 74.376353][ T4265] usb 4-1: Manufacturer: syz [ 74.383392][ T4265] usb 4-1: SerialNumber: syz [ 74.420014][ T4265] usb 4-1: config 0 descriptor?? [ 74.471605][ T4275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.503137][ T4265] hub 4-1:0.0: bad descriptor, ignoring hub [ 74.529319][ T4325] Zero length message leads to an empty skb [ 74.544147][ T4265] hub: probe of 4-1:0.0 failed with error -5 [ 74.920799][ T4234] usb 4-1: USB disconnect, device number 2 [ 76.172334][ T4350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.187652][ T4350] netlink: 236 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.225433][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.234026][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.305548][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.457615][ T4344] loop0: detected capacity change from 0 to 256 [ 76.584787][ T4344] FAT-fs (loop0): Unrecognized mount option "veth0_to_hsr" or missing value [ 76.675628][ T4362] loop2: detected capacity change from 0 to 64 [ 78.011331][ T4371] loop2: detected capacity change from 0 to 1024 [ 78.533094][ T4373] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 78.583604][ T4376] fuse: Bad value for 'fd' [ 78.635066][ T4373] team0: Port device wlan1 added [ 78.764376][ T4382] syz.0.27 sent an empty control message without MSG_MORE. [ 78.820621][ T4373] syz.4.26 (4373) used greatest stack depth: 19472 bytes left [ 78.908399][ T4385] overlayfs: filesystem on './file0' not supported [ 78.966010][ T4385] hfsplus: b-tree write err: -5, ino 3 [ 79.408684][ T4340] hfsplus: b-tree write err: -5, ino 3 [ 79.430406][ T4389] loop1: detected capacity change from 0 to 256 [ 79.494582][ T4391] loop4: detected capacity change from 0 to 64 [ 79.561633][ T4389] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.758044][ T26] audit: type=1800 audit(1783327421.159:2): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 80.651770][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.713895][ T4193] hfs: node 4:3 still has 1 user(s)! [ 80.905726][ T4402] loop0: detected capacity change from 0 to 32768 [ 80.938897][ T4406] binder: 4403:4406 ioctl c0306201 2000000002c0 returned -14 [ 81.069605][ T4402] XFS (loop0): Mounting V5 Filesystem [ 81.081834][ T4413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.130915][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 81.179159][ T4402] XFS (loop0): Ending clean mount [ 81.200194][ T4402] XFS (loop0): Quotacheck needed: Please wait. [ 81.280883][ T4402] XFS (loop0): Quotacheck: Done. [ 81.870744][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.181169][ T4230] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 82.200878][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.208961][ T4230] usb 3-1: Product: syz [ 82.353842][ T4230] usb 3-1: Manufacturer: syz [ 82.390182][ T4230] usb 3-1: SerialNumber: syz [ 82.434235][ T4230] usb 3-1: config 0 descriptor?? [ 82.498816][ T4230] usb 3-1: selecting invalid altsetting 1 [ 82.543690][ T4428] loop3: detected capacity change from 0 to 512 [ 82.550095][ T4230] technisat-usb2: could not set alternate setting to 0 [ 82.630975][ T4230] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 82.769433][ T4428] EXT4-fs (loop3): 1 truncate cleaned up [ 82.828645][ T4437] misc userio: Invalid payload size [ 82.852356][ T4405] loop4: detected capacity change from 0 to 40427 [ 82.872354][ T4405] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 82.881094][ T4405] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 82.897210][ T4428] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.909045][ T4405] F2FS-fs (loop4): invalid crc value [ 82.951385][ T4405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.973914][ T4230] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 83.067443][ T26] audit: type=1800 audit(1783327424.469:3): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.38" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 83.091940][ T4405] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 83.119101][ T4230] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 83.175200][ T4423] loop1: detected capacity change from 0 to 32768 [ 83.189169][ T4442] EXT4-fs (loop3): shut down requested (1) [ 83.211869][ T26] audit: type=1804 audit(1783327424.479:4): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.38" name="/newroot/3/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 83.310074][ T4405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.350743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.370739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.380753][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.390745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.400748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.410759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.420749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.430745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.440749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.588693][ T4423] XFS (loop1): Mounting V5 Filesystem [ 83.844510][ T4405] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 83.883039][ T4423] XFS (loop1): Ending clean mount [ 83.902090][ T4423] XFS (loop1): Quotacheck needed: Please wait. [ 83.919621][ T4195] XFS (loop0): Unmounting Filesystem [ 83.941200][ T4405] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x11c/0x1120 [ 83.978444][ T4423] XFS (loop1): Quotacheck: Done. [ 84.011929][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.076210][ T4405] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 84.093517][ T4423] capability: warning: `syz.1.37' uses 32-bit capabilities (legacy support in use) [ 84.108787][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.409949][ T4423] XFS (loop1): Unmounting Filesystem [ 84.550567][ T4193] attempt to access beyond end of device [ 84.550567][ T4193] loop4: rw=2049, want=45112, limit=40427 [ 84.666512][ T4473] netlink: 14 bytes leftover after parsing attributes in process `syz.3.42'. [ 85.590894][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.146344][ T4231] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 86.365045][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 86.374710][ T4231] usb 4-1: Product: syz [ 86.379331][ T4231] usb 4-1: SerialNumber: syz [ 86.390595][ T4231] usb 4-1: config 0 descriptor?? [ 87.488324][ T1107] cfg80211: failed to load regulatory.db [ 87.532629][ T4231] hso 4-1:0.0: Failed to find BULK IN ep [ 87.777397][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.786072][ T4231] usb 4-1: USB disconnect, device number 3 [ 88.284270][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 88.485656][ T13] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 88.503322][ T13] usb 5-1: config 0 has no interface number 0 [ 88.510174][ T4522] ======================================================= [ 88.510174][ T4522] WARNING: The mand mount option has been deprecated and [ 88.510174][ T4522] and is ignored by this kernel. Remove the mand [ 88.510174][ T4522] option from the mount to silence this warning. [ 88.510174][ T4522] ======================================================= [ 88.542989][ T13] usb 5-1: config 0 interface 184 has no altsetting 0 [ 88.721130][ T13] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.742059][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.758164][ T13] usb 5-1: Product: syz [ 88.763548][ T13] usb 5-1: Manufacturer: syz [ 88.768706][ T13] usb 5-1: SerialNumber: syz [ 88.806360][ T13] usb 5-1: config 0 descriptor?? [ 88.882015][ T4204] Bluetooth: Wrong link type (-22) [ 89.811017][ T13] usb 5-1: can't set config #0, error -71 [ 89.828518][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 89.856603][ T13] usb 5-1: USB disconnect, device number 2 [ 90.251206][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 90.290569][ T4559] netlink: 'syz.0.67': attribute type 15 has an invalid length. [ 90.326638][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 90.387481][ T26] audit: type=1326 audit(1783327431.789:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.1.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0077949e59 code=0x7ffc0000 [ 90.484758][ T26] audit: type=1326 audit(1783327431.819:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.1.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f0077949e59 code=0x7ffc0000 [ 90.575790][ T4574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.74'. [ 90.584777][ T26] audit: type=1326 audit(1783327431.819:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.1.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0077949e59 code=0x7ffc0000 [ 90.666623][ T26] audit: type=1326 audit(1783327431.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.1.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0077949e59 code=0x7ffc0000 [ 90.860854][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.990916][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.110978][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 92.173551][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 92.243443][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 92.293174][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.341039][ T4264] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.401098][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 92.430878][ T4264] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 92.450171][ T4264] usb 5-1: can't read configurations, error -71 [ 92.641012][ T7] usb 4-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 92.673518][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.690107][ T7] usb 4-1: Product: syz [ 92.701337][ T7] usb 4-1: Manufacturer: syz [ 92.706417][ T7] usb 4-1: SerialNumber: syz [ 93.124217][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 93.181521][ T7] usb 4-1: USB disconnect, device number 4 [ 93.281074][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.298006][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.611287][ T4626] syz.3.95 uses obsolete (PF_INET,SOCK_PACKET) [ 96.149301][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 96.159204][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.111979][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 97.291103][ T4234] usb 1-1: Using ep0 maxpacket: 8 [ 97.810989][ T4234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.920981][ T4234] usb 1-1: config 1 interface 0 has no altsetting 0 [ 98.090621][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 98.121253][ T4234] usb 1-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 98.132900][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.150159][ T4234] usb 1-1: Product: syz [ 98.176479][ T4234] usb 1-1: Manufacturer: 팚놄戠涺礬淿⪗氆톅ܜꚆഞ㨨稼㯬뾤䝁碠貭ឞ㠑沒ⲟ闯럽Ꮵꔡᯆ系⌲租鑣쇪趕晇肞䇼ᧂW [ 98.229092][ T4234] usb 1-1: SerialNumber: syz [ 100.931102][ T4234] usbhid 1-1:1.0: can't add hid device: -71 [ 100.937574][ T4234] usbhid: probe of 1-1:1.0 failed with error -71 [ 100.973207][ T4234] usb 1-1: USB disconnect, device number 2 [ 101.062185][ T4726] tmpfs: Unknown parameter 'usrquota' [ 101.477633][ T4301] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.712999][ T4770] program syz.4.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.907141][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 104.174854][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 104.181680][ T1109] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.190964][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 104.621081][ T1109] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.631490][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.681984][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.741180][ T1109] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.771998][ T1109] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.826338][ T1109] usb 5-1: Manufacturer: syz [ 104.919798][ T1109] usb 5-1: config 0 descriptor?? [ 105.047155][ T1109] igorplugusb 5-1:0.0: incorrect number of endpoints [ 105.061918][ T4231] usb 2-1: config 255 has an invalid interface number: 235 but max is 0 [ 105.077700][ T4231] usb 2-1: config 255 has no interface number 0 [ 105.101252][ T4231] usb 2-1: config 255 interface 235 has no altsetting 0 [ 105.271331][ T4231] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 105.282610][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.296588][ T4231] usb 2-1: Product: syz [ 105.304561][ T4231] usb 2-1: Manufacturer: syz [ 105.305933][ T4778] udc-core: couldn't find an available UDC or it's busy [ 105.309418][ T4231] usb 2-1: SerialNumber: syz [ 105.372100][ T4778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.393912][ T1107] usb 5-1: USB disconnect, device number 5 [ 106.216091][ T1109] Bluetooth: hci5: command 0x1001 tx timeout [ 106.226278][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 106.289803][ T4231] usb 2-1: USB disconnect, device number 2 [ 108.503464][ T1109] Bluetooth: hci5: command 0x1009 tx timeout [ 108.899036][ T4204] ================================================================== [ 108.907331][ T4204] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 108.915170][ T4204] Read of size 1 at addr ffff88802717ac0a by task kworker/u5:8/4204 [ 108.923165][ T4204] [ 108.925489][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 108.933034][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.943220][ T4204] Workqueue: hci3 hci_rx_work [ 108.947918][ T4204] Call Trace: [ 108.951198][ T4204] [ 108.954132][ T4204] dump_stack_lvl+0x188/0x250 [ 108.958830][ T4204] ? show_regs_print_info+0x20/0x20 [ 108.964035][ T4204] ? load_image+0x410/0x410 [ 108.968543][ T4204] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 108.974010][ T4204] print_address_description+0x60/0x2d0 [ 108.979563][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 108.984676][ T4204] kasan_report+0xdf/0x130 [ 108.989131][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 108.994252][ T4204] hci_le_meta_evt+0x12cf/0x3ca0 [ 108.999213][ T4204] ? hci_event_packet+0x363/0x1310 [ 109.004330][ T4204] ? __lock_acquire+0x7b50/0x7b50 [ 109.009369][ T4204] ? hci_remote_host_features_evt+0x240/0x240 [ 109.015448][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 109.021097][ T4204] ? mark_lock+0x94/0x320 [ 109.025442][ T4204] ? mutex_unlock+0x10/0x10 [ 109.029946][ T4204] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.035942][ T4204] ? lock_chain_count+0x20/0x20 [ 109.040820][ T4204] ? __rwlock_init+0x140/0x140 [ 109.045617][ T4204] hci_event_packet+0xe0b/0x1310 [ 109.050579][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 109.055532][ T4204] ? rcu_lock_release+0x20/0x20 [ 109.060401][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.065607][ T4204] hci_rx_work+0x255/0xa10 [ 109.070051][ T4204] process_one_work+0x867/0xff0 [ 109.074938][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 109.080575][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 109.085880][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.090919][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.096503][ T4204] ? wq_worker_running+0x97/0x170 [ 109.101621][ T4204] worker_thread+0xad7/0x12a0 [ 109.106448][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.112373][ T4204] kthread+0x42e/0x520 [ 109.116459][ T4204] ? rcu_lock_release+0x20/0x20 [ 109.121317][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 109.125917][ T4204] ret_from_fork+0x1f/0x30 [ 109.130345][ T4204] [ 109.133362][ T4204] [ 109.135680][ T4204] Allocated by task 4868: [ 109.140004][ T4204] __kasan_kmalloc+0xaf/0xe0 [ 109.144596][ T4204] __alloc_skb+0x22c/0x750 [ 109.149015][ T4204] vhci_write+0xbd/0x440 [ 109.153287][ T4204] vfs_write+0x748/0xd70 [ 109.157531][ T4204] ksys_write+0x153/0x260 [ 109.161880][ T4204] do_syscall_64+0x4c/0xa0 [ 109.166725][ T4204] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.172630][ T4204] [ 109.174974][ T4204] The buggy address belongs to the object at ffff88802717a800 [ 109.174974][ T4204] which belongs to the cache kmalloc-1k of size 1024 [ 109.189203][ T4204] The buggy address is located 10 bytes to the right of [ 109.189203][ T4204] 1024-byte region [ffff88802717a800, ffff88802717ac00) [ 109.203200][ T4204] The buggy address belongs to the page: [ 109.208846][ T4204] page:ffffea00009c5e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27178 [ 109.219168][ T4204] head:ffffea00009c5e00 order:3 compound_mapcount:0 compound_pincount:0 [ 109.227503][ T4204] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 109.235526][ T4204] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 109.244116][ T4204] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 109.252699][ T4204] page dumped because: kasan: bad access detected [ 109.259126][ T4204] page_owner tracks the page as allocated [ 109.264859][ T4204] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4230, ts 70383193302, free_ts 70294292774 [ 109.281876][ T4204] get_page_from_freelist+0x24f6/0x2670 [ 109.287436][ T4204] __alloc_pages+0x1ee/0x480 [ 109.292029][ T4204] new_slab+0xc0/0x4b0 [ 109.296109][ T4204] ___slab_alloc+0x807/0xdd0 [ 109.300705][ T4204] __kmalloc+0x11d/0x340 [ 109.304996][ T4204] ___neigh_create+0x6fa/0x2210 [ 109.309851][ T4204] ip6_finish_output2+0x9f5/0x1530 [ 109.314978][ T4204] ndisc_send_skb+0xb7a/0x1410 [ 109.319764][ T4204] addrconf_dad_completed+0x75f/0xc80 [ 109.325160][ T4204] addrconf_dad_work+0xc83/0x1530 [ 109.330215][ T4204] process_one_work+0x867/0xff0 [ 109.335069][ T4204] worker_thread+0xad7/0x12a0 [ 109.339750][ T4204] kthread+0x42e/0x520 [ 109.343820][ T4204] ret_from_fork+0x1f/0x30 [ 109.348260][ T4204] page last free stack trace: [ 109.352938][ T4204] free_unref_page_prepare+0x637/0x6c0 [ 109.358414][ T4204] free_unref_page+0x8f/0x2a0 [ 109.363343][ T4204] __unfreeze_partials+0x188/0x1e0 [ 109.368472][ T4204] put_cpu_partial+0x12d/0x190 [ 109.373247][ T4204] qlist_free_all+0x35/0x90 [ 109.378019][ T4204] kasan_quarantine_reduce+0x150/0x160 [ 109.383509][ T4204] __kasan_slab_alloc+0x2f/0xc0 [ 109.388364][ T4204] slab_post_alloc_hook+0x4c/0x380 [ 109.393496][ T4204] kmem_cache_alloc_node+0x184/0x2c0 [ 109.398781][ T4204] __alloc_skb+0xf4/0x750 [ 109.403112][ T4204] mld_newpack+0x12f/0xba0 [ 109.407527][ T4204] add_grec+0x12de/0x1780 [ 109.411855][ T4204] mld_ifc_work+0x6eb/0xde0 [ 109.416368][ T4204] process_one_work+0x867/0xff0 [ 109.421245][ T4204] worker_thread+0xad7/0x12a0 [ 109.425938][ T4204] kthread+0x42e/0x520 [ 109.430016][ T4204] [ 109.432340][ T4204] Memory state around the buggy address: [ 109.438122][ T4204] ffff88802717ab00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.446272][ T4204] ffff88802717ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.454337][ T4204] >ffff88802717ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.462399][ T4204] ^ [ 109.466726][ T4204] ffff88802717ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.474806][ T4204] ffff88802717ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.482864][ T4204] ================================================================== [ 109.490921][ T4204] Disabling lock debugging due to kernel taint [ 109.497160][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.609440][ T4204] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.616699][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 109.625665][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.635772][ T4204] Workqueue: hci3 hci_rx_work [ 109.640471][ T4204] Call Trace: [ 109.643749][ T4204] [ 109.646678][ T4204] dump_stack_lvl+0x188/0x250 [ 109.651362][ T4204] ? show_regs_print_info+0x20/0x20 [ 109.656559][ T4204] ? load_image+0x410/0x410 [ 109.661073][ T4204] panic+0x2f8/0x850 [ 109.664988][ T4204] ? bpf_jit_dump+0xd0/0xd0 [ 109.669492][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 109.674635][ T4204] ? check_panic_on_warn+0x6c/0xa0 [ 109.679747][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 109.684862][ T4204] check_panic_on_warn+0x80/0xa0 [ 109.689803][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 109.694915][ T4204] end_report+0x6d/0xf0 [ 109.699069][ T4204] kasan_report+0x102/0x130 [ 109.703582][ T4204] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 109.708712][ T4204] hci_le_meta_evt+0x12cf/0x3ca0 [ 109.713660][ T4204] ? hci_event_packet+0x363/0x1310 [ 109.718800][ T4204] ? __lock_acquire+0x7b50/0x7b50 [ 109.723842][ T4204] ? hci_remote_host_features_evt+0x240/0x240 [ 109.729962][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 109.735599][ T4204] ? mark_lock+0x94/0x320 [ 109.739934][ T4204] ? mutex_unlock+0x10/0x10 [ 109.744439][ T4204] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.750446][ T4204] ? lock_chain_count+0x20/0x20 [ 109.755299][ T4204] ? __rwlock_init+0x140/0x140 [ 109.760066][ T4204] hci_event_packet+0xe0b/0x1310 [ 109.765028][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 109.769886][ T4204] ? rcu_lock_release+0x20/0x20 [ 109.774742][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.779963][ T4204] hci_rx_work+0x255/0xa10 [ 109.784405][ T4204] process_one_work+0x867/0xff0 [ 109.789264][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 109.794895][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 109.800226][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.805256][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.810811][ T4204] ? wq_worker_running+0x97/0x170 [ 109.815858][ T4204] worker_thread+0xad7/0x12a0 [ 109.820549][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.826490][ T4204] kthread+0x42e/0x520 [ 109.830578][ T4204] ? rcu_lock_release+0x20/0x20 [ 109.835435][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 109.840038][ T4204] ret_from_fork+0x1f/0x30 [ 109.844472][ T4204] [ 109.847815][ T4204] Kernel Offset: disabled [ 109.852287][ T4204] Rebooting in 86400 seconds..