last executing test programs: 4.507625668s ago: executing program 0 (id=16): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x4, 0x12, 0x8a0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.218441885s ago: executing program 4 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x2, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2.224666724s ago: executing program 0 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.01681591s ago: executing program 4 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.881909323s ago: executing program 3 (id=30): pipe(&(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.867593034s ago: executing program 0 (id=31): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="c20000000100"}) 1.736462717s ago: executing program 0 (id=32): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4620, 0x407, @mcast2, 0x7f}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x2088, @private1, 0x3}}, {{0xa, 0x4e23, 0xfe, @private1, 0xfffffff4}}]}, 0x190) syz_emit_ethernet(0x66, &(0x7f0000000480)={@random="9d3e485beb27", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ff0400", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x19, '\x00', {0x4, 0x6, "b8b0ec", 0x5, 0x2c, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) 1.736290247s ago: executing program 1 (id=33): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') socket(0x24, 0x80801, 0x1) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 1.736225947s ago: executing program 4 (id=34): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.735724237s ago: executing program 2 (id=35): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) read(r3, &(0x7f0000001000)=""/8192, 0x2000) 1.681680718s ago: executing program 3 (id=36): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80f, 0x1ff}}, @wrmsr={0x65, 0x20, {0x830, 0x40040}}, @code={0xa, 0x12, {"fb"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x8a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x3, 0x5, 0xffffffffffffffff, 0x2, 0x39b8, 0x3d, 0x4cd4000000, 0x9, 0xffffffff80000001, 0x401, 0x0, 0x2, 0x7, 0x9, 0x4], 0x80a0000, 0x40000}) 1.571069471s ago: executing program 2 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x2, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.547204201s ago: executing program 1 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 1.369614306s ago: executing program 3 (id=39): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) 1.313867387s ago: executing program 3 (id=40): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 958.318397ms ago: executing program 2 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 909.682548ms ago: executing program 1 (id=42): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 818.99059ms ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) 816.59868ms ago: executing program 4 (id=44): setns(0xc9, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 657.582554ms ago: executing program 1 (id=45): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000240), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000600)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x68, 0x0, 0x5, 0x5e, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 646.440784ms ago: executing program 4 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 605.273095ms ago: executing program 2 (id=47): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) read(r3, &(0x7f0000001000)=""/8192, 0x2000) 405.58557ms ago: executing program 1 (id=48): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 405.36975ms ago: executing program 2 (id=49): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00d00}}, @wrmsr={0x65, 0x20, {0x80f, 0x1ff}}, @wrmsr={0x65, 0x20, {0x830, 0x40040}}, @code={0xa, 0x12, {"fb"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x8a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x3, 0x5, 0xffffffffffffffff, 0x2, 0x39b8, 0x3d, 0x4cd4000000, 0x9, 0xffffffff80000001, 0x401, 0x0, 0x2, 0x7, 0x9, 0x4], 0x80a0000, 0x40000}) 309.576392ms ago: executing program 4 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 260.231394ms ago: executing program 3 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x2, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 146.029467ms ago: executing program 2 (id=52): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4000800) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 80.404788ms ago: executing program 0 (id=53): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 38.177539ms ago: executing program 3 (id=54): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000240), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000600)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x68, 0x0, 0x5, 0x5e, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 0s ago: executing program 0 (id=55): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 61.742971][ T4172] cgroup: Unknown subsys name 'net' [ 61.884450][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.343272][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.872516][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.901561][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.912759][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 64.953992][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.052097][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.106686][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.114504][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.122581][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.131574][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.138813][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.146854][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.160719][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.167897][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.176540][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.190872][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.197972][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.206536][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.214817][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.222041][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.230625][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.250528][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.258012][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.266491][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.273904][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.281136][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.289479][ T4197] device bridge_slave_0 entered promiscuous mode [ 65.303658][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.310931][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.319399][ T4197] device bridge_slave_1 entered promiscuous mode [ 65.370858][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.389083][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.405520][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.416793][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.428022][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.445427][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.464584][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.477404][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.519822][ T4195] team0: Port device team_slave_0 added [ 65.535413][ T4185] team0: Port device team_slave_0 added [ 65.541613][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.549095][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.557090][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.565534][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.572741][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.580801][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.589760][ T4195] team0: Port device team_slave_1 added [ 65.610379][ T4186] team0: Port device team_slave_0 added [ 65.617406][ T4185] team0: Port device team_slave_1 added [ 65.651355][ T4186] team0: Port device team_slave_1 added [ 65.667081][ T4197] team0: Port device team_slave_0 added [ 65.679234][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.686224][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.712545][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.731407][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.738431][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.764702][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.776496][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.783637][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.809663][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.822610][ T4197] team0: Port device team_slave_1 added [ 65.830064][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.858132][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.865276][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.891368][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.916039][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.933800][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.940932][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.967056][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.980270][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.987238][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.020488][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.043779][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.051223][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.077331][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.095441][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.103374][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.129594][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.167847][ T4190] team0: Port device team_slave_0 added [ 66.176765][ T4190] team0: Port device team_slave_1 added [ 66.191786][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.199279][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.245458][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.253188][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.260274][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.268053][ T4195] Cannot create hsr debugfs directory [ 66.277074][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.284280][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.291553][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.299441][ T4186] Cannot create hsr debugfs directory [ 66.305387][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.312679][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.339328][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.354866][ T4197] device hsr_slave_0 entered promiscuous mode [ 66.362014][ T4197] device hsr_slave_1 entered promiscuous mode [ 66.368829][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.376438][ T4197] Cannot create hsr debugfs directory [ 66.396824][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.404101][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.430545][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.559395][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 66.565974][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 66.568740][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 66.582113][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 66.621495][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.628295][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.635185][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.643113][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 66.649383][ T4190] Cannot create hsr debugfs directory [ 66.843154][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.855359][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.870281][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.880654][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.919486][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.929737][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.943123][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.962663][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.033395][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.063805][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.086275][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.103214][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.111110][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.156568][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.166333][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.176222][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.185681][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.211753][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.221709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.231300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.241470][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.248789][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.257165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.277824][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.285514][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.295765][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.317852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.326783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.336030][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.343184][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.353739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.363161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.372499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.382134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.391391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.411815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.421209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.460046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.470648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.479611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.487904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.498058][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.510560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.522116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.535598][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.546919][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.559129][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.586434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.595498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.604609][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.611722][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.622590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.630903][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.642577][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.659041][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.688196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.701516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.714736][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.721870][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.737358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.764268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.773705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.802937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.818817][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.849023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.857939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.870566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.880434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.890683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.906308][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.922660][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.936269][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.966077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.974988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.984309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.993510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.003512][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.010636][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.020721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.029477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.037815][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.044941][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.054561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.063870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.072661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.085726][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.103333][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.120306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.128942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.137904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.146010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.161252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.170622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.183186][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.195212][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.218510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.226409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.236764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.247308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.257669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.266737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.275593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.302935][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.315238][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.327497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.337621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.346789][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.353917][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.363869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.373283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.382077][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.389200][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.397003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.407254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.415487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.438222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.450456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.465149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.477251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.541380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.551388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.560559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.569496][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.576573][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.588190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.597773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.606490][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.613607][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.623041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.632182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.642613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.650505][ T4174] Bluetooth: hci2: command 0x041b tx timeout [ 68.650563][ T4174] Bluetooth: hci1: command 0x041b tx timeout [ 68.650587][ T4174] Bluetooth: hci0: command 0x041b tx timeout [ 68.650610][ T4174] Bluetooth: hci4: command 0x041b tx timeout [ 68.676446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.685389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.695884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.705034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.713657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.723090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.729867][ T4174] Bluetooth: hci3: command 0x041b tx timeout [ 68.734789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.745929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.756105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.765129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.774420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.787300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.795097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.821212][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.841484][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.851113][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.862372][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.876113][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.885271][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.901245][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.915760][ T4186] device veth0_vlan entered promiscuous mode [ 68.936223][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.950288][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.960445][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.969157][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.976954][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.987286][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.995886][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.014826][ T4186] device veth1_vlan entered promiscuous mode [ 69.045585][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.074189][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.106988][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.139814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.152831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.191053][ T4186] device veth0_macvtap entered promiscuous mode [ 69.208570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.217267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.228090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.237796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.255914][ T4197] device veth0_vlan entered promiscuous mode [ 69.271904][ T4186] device veth1_macvtap entered promiscuous mode [ 69.282497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.292301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.301035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.311933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.340519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.350384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.358246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.367642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.384675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.393171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.409591][ T4197] device veth1_vlan entered promiscuous mode [ 69.426110][ T4195] device veth0_vlan entered promiscuous mode [ 69.436287][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.468836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.476878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.485698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.495539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.505902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.513420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.525680][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.542224][ T4195] device veth1_vlan entered promiscuous mode [ 69.557357][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.565916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.580106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.593994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.605732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.621482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.641815][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.657159][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.666558][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.676083][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696095][ T4197] device veth0_macvtap entered promiscuous mode [ 69.707406][ T4197] device veth1_macvtap entered promiscuous mode [ 69.732735][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.741695][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.755309][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.766311][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.780429][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.801503][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.822778][ T4195] device veth0_macvtap entered promiscuous mode [ 69.834842][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.854860][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.868182][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.881483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.893295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.906106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.916894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.927666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.950564][ T4195] device veth1_macvtap entered promiscuous mode [ 69.983607][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.994826][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.007225][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.021935][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.031071][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.043666][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.052865][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.062779][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.073865][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.084838][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.117899][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.128194][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.137886][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.146965][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.166694][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.186134][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.196285][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.213099][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.225220][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.235159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.245943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.254722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.264699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.274500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.282661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.290963][ T4185] device veth0_vlan entered promiscuous mode [ 70.319710][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.330683][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.341676][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.355766][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.367268][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.389215][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.397987][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.417088][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.426676][ T4206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.432865][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.444682][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.447302][ T4206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.454010][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.475139][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.488212][ T4185] device veth1_vlan entered promiscuous mode [ 70.518342][ T4190] device veth0_vlan entered promiscuous mode [ 70.543588][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.552453][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.561834][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.571187][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.581012][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.589392][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.626206][ T4190] device veth1_vlan entered promiscuous mode [ 70.650634][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.664126][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.696021][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.706015][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.715311][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.729257][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 70.744317][ T4185] device veth0_macvtap entered promiscuous mode [ 70.751213][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 70.770636][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 70.782398][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.798785][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 70.806056][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.814165][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 70.830470][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.839844][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.849507][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.862820][ T4190] device veth0_macvtap entered promiscuous mode [ 70.869466][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.877304][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.909967][ T4185] device veth1_macvtap entered promiscuous mode [ 70.917840][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.927014][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.935983][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.948751][ T4190] device veth1_macvtap entered promiscuous mode [ 70.983636][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.994362][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.007052][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.020513][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.056234][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.069364][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.081820][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.124973][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.143313][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.195851][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.206090][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.217593][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.226625][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.239272][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.250825][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.261903][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.272849][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.283747][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.290027][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.296705][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.300734][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.321615][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.332246][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.343998][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.357057][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.388709][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.398637][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.409245][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.420064][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.431587][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.477743][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.494174][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.503206][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.516355][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.526224][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.551091][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.563166][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.575022][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.586070][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.596738][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.607982][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.618212][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.628948][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.642047][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.652152][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.674765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.682495][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.692504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.702341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.712466][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.729821][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.739210][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.755657][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.772861][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.787422][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.816844][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.826342][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836637][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.846010][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.865916][ T4272] device syzkaller0 entered promiscuous mode [ 71.875788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.069992][ T4278] device syzkaller0 entered promiscuous mode [ 72.147342][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.173668][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.220448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.236819][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.259498][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.275527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.302865][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.326508][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.332726][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.345446][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.358185][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.382359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.809522][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 72.820232][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 72.836578][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 72.880118][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 72.886526][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 73.020331][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.242206][ T4287] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x04 [ 73.325931][ T4307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14'. [ 74.346180][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.354472][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.912427][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.950564][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.449233][ T4314] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.459603][ T4314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.469591][ T4314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.479308][ T4314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.675914][ T4314] syz.0.16 (4314) used greatest stack depth: 20752 bytes left [ 75.896851][ T4373] device syzkaller0 entered promiscuous mode [ 75.974586][ T4376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27'. [ 76.799410][ T4403] device syzkaller0 entered promiscuous mode [ 77.000770][ T4412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42'. [ 77.307241][ T4421] device syzkaller0 entered promiscuous mode [ 77.661062][ T4434] device syzkaller0 entered promiscuous mode [ 77.765696][ T4436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.821637][ T4438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 77.839326][ T4436] [ 77.841712][ T4436] ============================= [ 77.846586][ T4436] WARNING: suspicious RCU usage [ 77.858465][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.910010][ T4436] syzkaller #0 Not tainted [ 77.914515][ T4436] ----------------------------- [ 77.926439][ T4436] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 77.945904][ T4436] [ 77.945904][ T4436] other info that might help us debug this: [ 77.945904][ T4436] [ 77.957206][ T4436] [ 77.957206][ T4436] rcu_scheduler_active = 2, debug_locks = 1 [ 77.958700][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.974510][ T4436] 1 lock held by syz.2.52/4436: [ 77.979946][ T4436] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 77.990195][ T4436] [ 77.990195][ T4436] stack backtrace: [ 77.996280][ T4436] CPU: 1 PID: 4436 Comm: syz.2.52 Not tainted syzkaller #0 [ 78.003513][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.013605][ T4436] Call Trace: [ 78.016911][ T4436] [ 78.019868][ T4436] dump_stack_lvl+0x188/0x250 [ 78.024580][ T4436] ? load_image+0x410/0x410 [ 78.029117][ T4436] ? show_regs_print_info+0x20/0x20 [ 78.034367][ T4436] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.039947][ T4436] ? local_bh_enable+0x20/0x20 [ 78.044741][ T4436] rhltable_lookup+0x787/0x7a0 [ 78.049542][ T4436] ? lock_chain_count+0x20/0x20 [ 78.054430][ T4436] ? rcu_is_watching+0x11/0xa0 [ 78.059319][ T4436] ? mr_mfc_find_parent+0x190/0x190 [ 78.064555][ T4436] ? local_bh_enable+0x20/0x20 [ 78.069362][ T4436] ? lock_chain_count+0x20/0x20 [ 78.074251][ T4436] mr_mfc_find_any_parent+0xb7/0x1d0 [ 78.079573][ T4436] ? local_bh_enable+0x20/0x20 [ 78.084370][ T4436] ip_mr_forward+0x247/0xf60 [ 78.089011][ T4436] ipmr_mfc_add+0x2273/0x2bd0 [ 78.093757][ T4436] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 78.098727][ T4436] ? __lock_acquire+0x7b50/0x7b50 [ 78.103806][ T4436] ip_mroute_setsockopt+0xecd/0x1230 [ 78.109128][ T4436] ? ipmr_rule_default+0x70/0x70 [ 78.114140][ T4436] ? __might_sleep+0xf0/0xf0 [ 78.118878][ T4436] ip_setsockopt+0x568/0x31e0 [ 78.123616][ T4436] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 78.129109][ T4436] ? aa_sk_perm+0x7dc/0x910 [ 78.133651][ T4436] ? aa_af_perm+0x340/0x340 [ 78.138198][ T4436] ? __fget_files+0x402/0x470 [ 78.142915][ T4436] ? aa_sock_opt_perm+0x74/0x100 [ 78.147896][ T4436] ? sock_common_setsockopt+0x32/0xb0 [ 78.153290][ T4436] ? raw_setsockopt+0xc2/0x170 [ 78.158059][ T4436] ? sock_common_recvmsg+0x1c0/0x1c0 [ 78.163376][ T4436] __sys_setsockopt+0x2bf/0x3d0 [ 78.168271][ T4436] __x64_sys_setsockopt+0xb1/0xc0 [ 78.173342][ T4436] do_syscall_64+0x4c/0xa0 [ 78.177779][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.182464][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.187171][ T4436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.193104][ T4436] RIP: 0033:0x7f4b9c972019 [ 78.197550][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.217348][ T4436] RSP: 002b:00007f4b9abca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.225802][ T4436] RAX: ffffffffffffffda RBX: 00007f4b9cbf9fa0 RCX: 00007f4b9c972019 [ 78.233804][ T4436] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 78.241807][ T4436] RBP: 00007f4b9ca0900c R08: 000000000000003c R09: 0000000000000000 [ 78.249837][ T4436] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 78.257839][ T4436] R13: 00007f4b9cbfa038 R14: 00007f4b9cbf9fa0 R15: 00007ffedcadec28 [ 78.265862][ T4436] [ 78.274523][ T4436] [ 78.277022][ T4436] ============================= [ 78.282449][ T4436] WARNING: suspicious RCU usage [ 78.287506][ T4436] syzkaller #0 Not tainted [ 78.292494][ T4436] ----------------------------- [ 78.297507][ T4436] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 78.306575][ T4436] [ 78.306575][ T4436] other info that might help us debug this: [ 78.306575][ T4436] [ 78.317308][ T4436] [ 78.317308][ T4436] rcu_scheduler_active = 2, debug_locks = 1 [ 78.328945][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 78.337551][ T4436] 1 lock held by syz.2.52/4436: [ 78.342875][ T4436] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 78.353908][ T4436] [ 78.353908][ T4436] stack backtrace: [ 78.361314][ T4436] CPU: 1 PID: 4436 Comm: syz.2.52 Not tainted syzkaller #0 [ 78.368585][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.378667][ T4436] Call Trace: [ 78.381968][ T4436] [ 78.384922][ T4436] dump_stack_lvl+0x188/0x250 [ 78.389636][ T4436] ? load_image+0x410/0x410 [ 78.394179][ T4436] ? show_regs_print_info+0x20/0x20 [ 78.399426][ T4436] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.405009][ T4436] ? local_bh_enable+0x20/0x20 [ 78.409814][ T4436] rhltable_lookup+0x512/0x7a0 [ 78.414628][ T4436] ? local_bh_enable+0x20/0x20 [ 78.419429][ T4436] ? mr_mfc_find_parent+0x190/0x190 [ 78.424671][ T4436] ? local_bh_enable+0x20/0x20 [ 78.429491][ T4436] ? lock_chain_count+0x20/0x20 [ 78.434378][ T4436] mr_mfc_find_any_parent+0xb7/0x1d0 [ 78.439746][ T4436] ? local_bh_enable+0x20/0x20 [ 78.444549][ T4436] ip_mr_forward+0x247/0xf60 [ 78.449191][ T4436] ipmr_mfc_add+0x2273/0x2bd0 [ 78.453931][ T4436] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 78.458903][ T4436] ? __lock_acquire+0x7b50/0x7b50 [ 78.463977][ T4436] ip_mroute_setsockopt+0xecd/0x1230 [ 78.469302][ T4436] ? ipmr_rule_default+0x70/0x70 [ 78.474287][ T4436] ? __might_sleep+0xf0/0xf0 [ 78.478912][ T4436] ip_setsockopt+0x568/0x31e0 [ 78.483627][ T4436] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 78.489024][ T4436] ? aa_sk_perm+0x7dc/0x910 [ 78.493573][ T4436] ? aa_af_perm+0x340/0x340 [ 78.498110][ T4436] ? __fget_files+0x402/0x470 [ 78.502824][ T4436] ? aa_sock_opt_perm+0x74/0x100 [ 78.507927][ T4436] ? sock_common_setsockopt+0x32/0xb0 [ 78.508982][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.513324][ T4436] ? raw_setsockopt+0xc2/0x170 [ 78.525575][ T4436] ? sock_common_recvmsg+0x1c0/0x1c0 [ 78.530900][ T4436] __sys_setsockopt+0x2bf/0x3d0 [ 78.535789][ T4436] __x64_sys_setsockopt+0xb1/0xc0 [ 78.540848][ T4436] do_syscall_64+0x4c/0xa0 [ 78.545312][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.550026][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.554770][ T4436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.560698][ T4436] RIP: 0033:0x7f4b9c972019 [ 78.565137][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.584768][ T4436] RSP: 002b:00007f4b9abca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.593225][ T4436] RAX: ffffffffffffffda RBX: 00007f4b9cbf9fa0 RCX: 00007f4b9c972019 [ 78.601236][ T4436] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 78.609248][ T4436] RBP: 00007f4b9ca0900c R08: 000000000000003c R09: 0000000000000000 [ 78.617247][ T4436] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 78.625243][ T4436] R13: 00007f4b9cbfa038 R14: 00007f4b9cbf9fa0 R15: 00007ffedcadec28 [ 78.633262][ T4436] [ 78.644454][ T4436] [ 78.646917][ T4436] ============================= [ 78.653970][ T4436] WARNING: suspicious RCU usage [ 78.659196][ T4436] syzkaller #0 Not tainted [ 78.663892][ T4436] ----------------------------- [ 78.669341][ T4436] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 78.678067][ T4436] [ 78.678067][ T4436] other info that might help us debug this: [ 78.678067][ T4436] [ 78.689069][ T4436] [ 78.689069][ T4436] rcu_scheduler_active = 2, debug_locks = 1 [ 78.697176][ T4436] 1 lock held by syz.2.52/4436: [ 78.702142][ T4436] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 78.712383][ T4436] [ 78.712383][ T4436] stack backtrace: [ 78.719314][ T4436] CPU: 1 PID: 4436 Comm: syz.2.52 Not tainted syzkaller #0 [ 78.726553][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.736640][ T4436] Call Trace: [ 78.739967][ T4436] [ 78.742936][ T4436] dump_stack_lvl+0x188/0x250 [ 78.747668][ T4436] ? load_image+0x410/0x410 [ 78.752234][ T4436] ? show_regs_print_info+0x20/0x20 [ 78.757488][ T4436] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.763069][ T4436] ? local_bh_enable+0x20/0x20 [ 78.767977][ T4436] rhltable_lookup+0x5fc/0x7a0 [ 78.772774][ T4436] ? local_bh_enable+0x20/0x20 [ 78.777570][ T4436] ? mr_mfc_find_parent+0x190/0x190 [ 78.782807][ T4436] ? local_bh_enable+0x20/0x20 [ 78.787635][ T4436] ? lock_chain_count+0x20/0x20 [ 78.792523][ T4436] mr_mfc_find_any_parent+0xb7/0x1d0 [ 78.797865][ T4436] ? local_bh_enable+0x20/0x20 [ 78.802645][ T4436] ip_mr_forward+0x247/0xf60 [ 78.807291][ T4436] ipmr_mfc_add+0x2273/0x2bd0 [ 78.812021][ T4436] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 78.817010][ T4436] ? __lock_acquire+0x7b50/0x7b50 [ 78.822098][ T4436] ip_mroute_setsockopt+0xecd/0x1230 [ 78.827465][ T4436] ? ipmr_rule_default+0x70/0x70 [ 78.832549][ T4436] ? __might_sleep+0xf0/0xf0 [ 78.837175][ T4436] ip_setsockopt+0x568/0x31e0 [ 78.841913][ T4436] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 78.847311][ T4436] ? aa_sk_perm+0x7dc/0x910 [ 78.851857][ T4436] ? aa_af_perm+0x340/0x340 [ 78.856396][ T4436] ? __fget_files+0x402/0x470 [ 78.861102][ T4436] ? aa_sock_opt_perm+0x74/0x100 [ 78.866088][ T4436] ? sock_common_setsockopt+0x32/0xb0 [ 78.871494][ T4436] ? raw_setsockopt+0xc2/0x170 [ 78.876289][ T4436] ? sock_common_recvmsg+0x1c0/0x1c0 [ 78.881607][ T4436] __sys_setsockopt+0x2bf/0x3d0 [ 78.886494][ T4436] __x64_sys_setsockopt+0xb1/0xc0 [ 78.891572][ T4436] do_syscall_64+0x4c/0xa0 [ 78.896052][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.900777][ T4436] ? clear_bhb_loop+0x30/0x80 [ 78.905486][ T4436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.911389][ T4436] RIP: 0033:0x7f4b9c972019 [ 78.915853][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.935498][ T4436] RSP: 002b:00007f4b9abca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.943954][ T4436] RAX: ffffffffffffffda RBX: 00007f4b9cbf9fa0 RCX: 00007f4b9c972019 [ 78.951974][ T4436] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 78.959993][ T4436] RBP: 00007f4b9ca0900c R08: 000000000000003c R09: 0000000000000000 [ 78.967995][ T4436] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 78.975985][ T4436] R13: 00007f4b9cbfa038 R14: 00007f4b9cbf9fa0 R15: 00007ffedcadec28 [ 78.984012][ T4436] [ 78.989825][ T4227] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.998113][ T4227] usb 2-1: config 0 has no interface number 0 [ 79.006627][ T4227] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 79.017513][ T4227] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.027937][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.041956][ T4227] usb 2-1: config 0 descriptor?? [ 79.048682][ T13] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 79.063200][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.082871][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.088933][ T13] usb 1-1: Product: syz [ 79.101211][ T4227] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 79.111286][ T13] usb 1-1: Manufacturer: syz [ 79.116403][ T13] usb 1-1: SerialNumber: syz [ 79.121551][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.139445][ T21] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 79.163979][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.191830][ T21] usb 5-1: config 0 descriptor?? [ 79.288789][ T3516] usb 2-1: USB disconnect, device number 2 [ 79.673174][ T21] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 79.680794][ T21] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 79.692565][ T21] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input5 [ 79.717221][ T21] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 79.882898][ T4431] udc-core: couldn't find an available UDC or it's busy [ 79.890063][ T4431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.910526][ T21] usb 5-1: USB disconnect, device number 2 [ 81.418599][ T13] rtl8150 1-1:1.0: couldn't reset the device [ 81.425385][ T13] rtl8150: probe of 1-1:1.0 failed with error -5 [ 81.435779][ T13] usb 1-1: USB disconnect, device number 2 [ 86.654391][ T23] cfg80211: failed to load regulatory.db