last executing test programs: 2m9.885421151s ago: executing program 3 (id=45): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x703f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x5fad, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 2m8.906261802s ago: executing program 3 (id=55): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m8.605996518s ago: executing program 0 (id=61): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2b, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}]}, 0x23) 2m8.463629601s ago: executing program 0 (id=64): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m6.707988106s ago: executing program 3 (id=68): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0xffffdde4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000a80)={0x33, &(0x7f0000000280)}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x12, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x4cca01) ioctl$TIOCCONS(r5, 0x541d) close(0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m5.584906469s ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m5.370828583s ago: executing program 3 (id=74): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x4982, 0x50080}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x6}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 2m4.874247744s ago: executing program 3 (id=80): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m4.717174247s ago: executing program 32 (id=80): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m4.612042019s ago: executing program 0 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000203030000000000000000000500004a08000340000000081400010001"], 0x30}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) 2m4.602411709s ago: executing program 1 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) 2m4.438433173s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m4.438170353s ago: executing program 1 (id=85): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m4.375419514s ago: executing program 0 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m4.267524876s ago: executing program 1 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x40) 2m4.162408768s ago: executing program 1 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8, 0x0) 2m4.104506889s ago: executing program 1 (id=89): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c000304"], 0xf) 2m3.990634492s ago: executing program 0 (id=90): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 2m3.894788434s ago: executing program 33 (id=90): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 2m3.657723108s ago: executing program 1 (id=93): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet(0x2, 0x4000000000000001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x8402219, 0x4fce, 0x3b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 2m3.282689666s ago: executing program 34 (id=93): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet(0x2, 0x4000000000000001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x8402219, 0x4fce, 0x3b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 1m40.795135943s ago: executing program 7 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m40.630110957s ago: executing program 7 (id=176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001000000000000000080000008500000029000000850000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1m37.384104453s ago: executing program 35 (id=185): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1m14.383345646s ago: executing program 8 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m14.156455422s ago: executing program 8 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073030000000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m13.00400465s ago: executing program 8 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m12.59274992s ago: executing program 36 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f00007f5000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000040)=""/61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4.024464162s ago: executing program 9 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) 3.553018594s ago: executing program 9 (id=756): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x28) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f4", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x2, 0x40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 3.348518829s ago: executing program 9 (id=759): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.254058035s ago: executing program 2 (id=767): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.06177583s ago: executing program 2 (id=771): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.995242852s ago: executing program 5 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0xc4, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0xb0, 0x1, 0x0, 0x0, @binary="e470c475ff61c878688eb63b9cb55c294ae58f01cf1314e07c94dadda792f18ce708d650dc01809bde85fd452f7fd20f027e59ba9c27ddb576a3af3b0697981206f16fa4ce66cdd281f2da705a97ec421ad628562df6ce4a5c22e9b657f61b604dd5362c79615f48edb6498155418c68f7059e2b5d6905901a283427b4adbebcb49da29abdfa17c260e9172b4e158bb9f23a5c88cba14fee80c78fc6e4475cf186e8aea51b47d558094f0100"}]}, 0xc4}}, 0x4004090) 1.870960815s ago: executing program 6 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x4, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffc2, @private0, 0x7}}, @sadb_address={0x5, 0x17, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @private2, 0x1000}}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x88}, 0x1, 0x7}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'security.capability\x00'}, &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.794461077s ago: executing program 5 (id=775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)="6bab853643d5443e7ab8b721b507c08a1ae6f4c744444dbb3ff852e9a3f0c0145237db98f3ff50c8d1f930c7dd7c10926e80a6674bab01fb480c88ac85d143313037f2b828c12fa6fd38436832fb45d3926fc6dffd935ba3156c35", 0x5b, 0xb, 0x0, 0x0) shutdown(r0, 0x1) 1.794290367s ago: executing program 2 (id=776): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7, 0x5}, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x400101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) 1.733643398s ago: executing program 6 (id=777): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x21) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x20000000000}]}}], {0x14}}, 0x90}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 1.66041757s ago: executing program 5 (id=779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.380747107s ago: executing program 5 (id=781): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.26289165s ago: executing program 4 (id=782): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x28) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f4", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1.064872814s ago: executing program 4 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd27, 0x25dfdbf6, {0xa, 0x80, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 974.472677ms ago: executing program 5 (id=784): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 963.207307ms ago: executing program 6 (id=785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r1, 0x0, 0x40000) 859.26829ms ago: executing program 4 (id=786): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xfe, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0xf0, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x94, 0x3, [], "bfdd9b9a51916d3aae7e170e4f833814b5766c46fec832ce3e160d7a6060a14d4eb7101fd5571d8e02a1d9a9be52dafb7deb200d6dfad7607979f3544abc16d527f905b00947f7ecbc1db4164a52bd93286afff31ca9f49785639068f2beef579e4c753f787dd116c9899298719199cabf198624c352d01b094b11dbe895044ffd2bf0df6da321da669819d5109a6fcd59092645"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x881d, 0x6]}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x2005, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 814.994271ms ago: executing program 2 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x4, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xdb, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffc2, @private0, 0x7}}, @sadb_address={0x5, 0x17, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @private2, 0x1000}}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x88}, 0x1, 0x7}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYBLOB], 0x74}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'security.capability\x00'}, &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 690.398634ms ago: executing program 6 (id=788): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 641.101705ms ago: executing program 4 (id=789): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 552.360157ms ago: executing program 2 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x40010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 478.364049ms ago: executing program 6 (id=791): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 429.98762ms ago: executing program 4 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000009c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f58001280200001800a00010071756f7461000000100002800c0001400000000000000009200001800e000100636f6e6e6c696d69740000000c0002800800014000000796df7823800900010068617368000000000400028008000340000001"], 0xe4}}, 0x20050800) 384.380761ms ago: executing program 9 (id=793): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x28) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f4", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 214.251615ms ago: executing program 6 (id=794): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 213.421475ms ago: executing program 9 (id=795): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00022abd700000080003000000eff5a01b00fba2606fe23c4ff7ce0ad82fd015dc6edf0293984280998cbb9e8e3bef36da99de78aeabc7cfc3f5f37671b6783a1e5acadb184042d11f090f91953d8f00"/89, @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x84) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) 66.455639ms ago: executing program 5 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) 66.263749ms ago: executing program 4 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x3}, 0x2c000081) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000000c0)={0x8, 0x9, 0x3, 0x7, 0x3, 0x0, 0x2}) 34.57465ms ago: executing program 9 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r2, 0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xe) 0s ago: executing program 2 (id=799): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x25dffbfb, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c901}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xfe}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044) kernel console output (not intermixed with test programs): e the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.080266][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.105339][ T4188] team0: Port device team_slave_0 added [ 63.112183][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.119283][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.145545][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.163656][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.170918][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.197170][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.223675][ T4198] team0: Port device team_slave_0 added [ 63.231406][ T4188] team0: Port device team_slave_1 added [ 63.247974][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.268523][ T4198] team0: Port device team_slave_1 added [ 63.289216][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.331256][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.338607][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.365189][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.380163][ T4192] device hsr_slave_0 entered promiscuous mode [ 63.387855][ T4192] device hsr_slave_1 entered promiscuous mode [ 63.404674][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.413405][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.420412][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.428304][ T4186] Cannot create hsr debugfs directory [ 63.441845][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.449481][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.476160][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.492395][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.499718][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.526400][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.549842][ T4187] team0: Port device team_slave_0 added [ 63.569178][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.576646][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.603185][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.626128][ T4187] team0: Port device team_slave_1 added [ 63.713720][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.720956][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.728777][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.737003][ T4188] Cannot create hsr debugfs directory [ 63.765202][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.772314][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.798630][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.811736][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.819090][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.845731][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.870315][ T4198] device hsr_slave_0 entered promiscuous mode [ 63.877446][ T4198] device hsr_slave_1 entered promiscuous mode [ 63.884043][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.886649][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.892108][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.898643][ T4198] Cannot create hsr debugfs directory [ 63.965779][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 63.971873][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 63.971952][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.988006][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.995152][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.002517][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.010376][ T4187] Cannot create hsr debugfs directory [ 64.222735][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.237335][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.252698][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.262568][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.338221][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.348928][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.371740][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.382744][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.421631][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.457857][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.469238][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.488710][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.524114][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.539637][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.554934][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.564989][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.575226][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.586714][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.594838][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.604210][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.614115][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.621667][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.643083][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.653429][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.663672][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.674678][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.683880][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.693191][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.700349][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.709933][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.732991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.763358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.775002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.808369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.820219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.830082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.839328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.848940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.873214][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.882744][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.893388][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.905839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.917752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.940091][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.949621][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.978760][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.992759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.001019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.014529][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.065256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.074485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.090339][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.097657][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.116700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.125414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.134516][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.141736][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.151175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.174061][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.200434][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.217546][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.228545][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.239094][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.247784][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.281467][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.291888][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.300782][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.310560][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.320160][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.330785][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.341082][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.350037][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.359576][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.367951][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.376362][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.409900][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.418982][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.428891][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.438389][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.449722][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.457169][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.465361][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.475768][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.484375][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.491532][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.501365][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.509803][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.530362][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.547989][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.557524][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.567117][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.574386][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.583091][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.592215][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.601571][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.612647][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.619890][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.628816][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.636633][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.670368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.681126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.692597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.702939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.713130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.723528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.733853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.742762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.752614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.761375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.772100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.782107][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.793222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.803191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.849162][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.867157][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.887556][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.903890][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.914324][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.923174][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.931659][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.940510][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.950681][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.959384][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.967246][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 65.973601][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 65.974877][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.993793][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.014107][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.046845][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 66.056267][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 66.068371][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.075793][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 66.097084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.107772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.120906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.135835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.160000][ T4186] device veth0_vlan entered promiscuous mode [ 66.187639][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.198396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.217109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.227454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.236192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.244278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.254068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.270267][ T4186] device veth1_vlan entered promiscuous mode [ 66.281720][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.290851][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.300272][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.308988][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.316098][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.344297][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.369730][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.386408][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.402592][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.409825][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.423913][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.446406][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.473787][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.482937][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.497165][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.508966][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.518614][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.541089][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.573632][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.584944][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.605900][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.613286][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.622474][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.630513][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.638425][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.648663][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.657921][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.667357][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.676611][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.685067][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.694168][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.706496][ T4186] device veth0_macvtap entered promiscuous mode [ 66.736203][ T4186] device veth1_macvtap entered promiscuous mode [ 66.757341][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.768169][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.781904][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.792836][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.804704][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.816305][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.827187][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.884449][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.901070][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.928598][ T4192] device veth0_vlan entered promiscuous mode [ 66.935382][ T4187] device veth0_vlan entered promiscuous mode [ 66.945224][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.958032][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.967355][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.976503][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.984894][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.993766][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.003541][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.013644][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.029397][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.038106][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.049296][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.059700][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.072010][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082575][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.092366][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101213][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.119517][ T4187] device veth1_vlan entered promiscuous mode [ 67.134784][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.144914][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.152730][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.168555][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.177793][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.199198][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.210521][ T4192] device veth1_vlan entered promiscuous mode [ 67.247874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.259243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.268707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.278044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.292137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.301100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.309668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.343096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.352078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.365042][ T4188] device veth0_vlan entered promiscuous mode [ 67.379401][ T4187] device veth0_macvtap entered promiscuous mode [ 67.401497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.414610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.425314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.453746][ T4187] device veth1_macvtap entered promiscuous mode [ 67.491208][ T4188] device veth1_vlan entered promiscuous mode [ 67.495338][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.523283][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.530813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.541975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.550560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.559739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.570872][ T4192] device veth0_macvtap entered promiscuous mode [ 67.591878][ T4192] device veth1_macvtap entered promiscuous mode [ 67.630004][ T4198] device veth0_vlan entered promiscuous mode [ 67.639501][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.650132][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.659214][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.668103][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.677849][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.686520][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.706472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.715336][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.721520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.732590][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.742399][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.757902][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772315][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.783649][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.794556][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.807547][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.819177][ T4188] device veth0_macvtap entered promiscuous mode [ 67.839555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.847743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.856821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.865417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.875820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.884485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.899230][ T4198] device veth1_vlan entered promiscuous mode [ 67.911664][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.922801][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.932146][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.942223][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.957440][ T4188] device veth1_macvtap entered promiscuous mode [ 67.969264][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.983357][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.994821][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.007588][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.019858][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.057084][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 68.061737][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.063222][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 68.074124][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.088796][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.098013][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.107214][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.119514][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.130897][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 68.137270][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 68.143502][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.153733][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 68.159841][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.171180][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.201776][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.229872][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.240756][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.250998][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.262617][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.272572][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.283128][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.296522][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.303976][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.313021][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.322099][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.333658][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.344413][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353372][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362985][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.373359][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.390068][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.398792][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.408947][ T4268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 68.456375][ T4268] bond0: (slave bond_slave_1): Releasing backup interface [ 68.472409][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.484343][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.495556][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.506290][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.516810][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.528393][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.544618][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.562907][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.572295][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.582441][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592426][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.614325][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.630953][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.656768][ T4198] device veth0_macvtap entered promiscuous mode [ 68.692217][ T4198] device veth1_macvtap entered promiscuous mode [ 68.727154][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.735076][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.770396][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.785271][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.793933][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.859693][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.868634][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.895856][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.911523][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.922425][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.934050][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.944287][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.955234][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.965855][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.977196][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.988642][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.997907][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.998461][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.006507][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.024953][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.038286][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.063373][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.077751][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.089187][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.101824][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.113079][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.123900][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.134284][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.145066][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.158640][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.174914][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.190682][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.204869][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214336][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.228661][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.241938][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.253372][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.296599][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.329626][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.352393][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.364673][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.448411][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.458432][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.503296][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.523789][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.537291][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.554916][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.641414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.757989][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.266837][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 70.493110][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 70.499342][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 70.505509][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 70.511590][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 70.574558][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.597942][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.630491][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.641921][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.680100][ T4295] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 70.689939][ T4295] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 70.772576][ T4302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.851682][ T4302] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.496760][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504029][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.295489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.315489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.325477][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.345473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.355475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.365475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 72.375475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.385474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.395475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.405472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.579315][ T4291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.669758][ T4348] device syzkaller0 entered promiscuous mode [ 73.710342][ T4348] tipc: Started in network mode [ 73.735682][ T4348] tipc: Node identity eae30568a4a8, cluster identity 4711 [ 73.753742][ T4348] tipc: Enabled bearer , priority 0 [ 73.825594][ T4347] tipc: Resetting bearer [ 74.479197][ T4347] tipc: Disabling bearer [ 75.394380][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.403812][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.412854][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.421933][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.430916][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.439968][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.449258][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.458589][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.467507][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.476786][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 75.605849][ T4364] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.976186][ T4364] usb 1-1: Using ep0 maxpacket: 16 [ 76.079308][ T4391] netlink: 'syz.3.29': attribute type 2 has an invalid length. [ 76.101707][ T4404] autofs4:pid:4404:autofs_fill_super: called with bogus options [ 76.130505][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 76.177750][ T4364] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 76.230708][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.231347][ T4408] autofs4:pid:4408:autofs_fill_super: called with bogus options [ 76.246593][ T4364] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.727682][ T4418] sctp: failed to load transform for md5: -2 [ 76.795761][ T4364] usb 1-1: string descriptor 0 read error: -71 [ 76.802346][ T4364] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 76.915400][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.098553][ T4364] usb 1-1: config 0 descriptor?? [ 77.166289][ T4364] usb 1-1: can't set config #0, error -71 [ 77.364958][ T4364] usb 1-1: USB disconnect, device number 2 [ 78.495456][ C0] sched: RT throttling activated [ 79.684390][ T4469] autofs4:pid:4469:autofs_fill_super: called with bogus options [ 79.695003][ T4471] autofs4:pid:4471:autofs_fill_super: called with bogus options [ 80.762616][ T4517] autofs4:pid:4517:autofs_fill_super: called with bogus options [ 80.780660][ T4514] autofs4:pid:4514:autofs_fill_super: called with bogus options [ 80.989332][ T4528] Zero length message leads to an empty skb [ 81.062798][ T4515] kvm [4510]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 81.191458][ T4515] kvm [4510]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x81 [ 81.225315][ T4538] file system registered [ 81.270789][ T4515] kvm [4510]: vcpu0, guest rIP: 0x1b8 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 82.696713][ T4515] kvm [4510]: vcpu0, guest rIP: 0x1b8 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 82.738767][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.747775][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.755348][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.763871][ T4543] device bridge_slave_0 left promiscuous mode [ 82.770585][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.848373][ T4543] device bridge_slave_1 left promiscuous mode [ 82.854626][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.862928][ T4364] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.874161][ T4543] bond0: (slave bond_slave_0): Releasing backup interface [ 82.928243][ T4543] bond0: (slave bond_slave_1): Releasing backup interface [ 83.024953][ T4543] team0: Port device team_slave_0 removed [ 83.087005][ T4543] team0: Port device team_slave_1 removed [ 83.093405][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.101091][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.232634][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.240293][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.257267][ T4550] __nla_validate_parse: 44 callbacks suppressed [ 83.257285][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 83.285571][ T4364] usb 1-1: Using ep0 maxpacket: 8 [ 83.308970][ T4550] netlink: 'syz.4.63': attribute type 5 has an invalid length. [ 83.334004][ T4550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 83.386568][ T4550] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 83.415316][ T4550] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 83.433886][ T4550] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 83.453264][ T4550] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 83.473622][ T4550] device geneve2 entered promiscuous mode [ 83.490266][ T4549] team0: Mode changed to "loadbalance" [ 83.585833][ T4364] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 83.605909][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.616456][ T4364] usb 1-1: Product: syz [ 83.620667][ T4364] usb 1-1: Manufacturer: syz [ 83.625317][ T4364] usb 1-1: SerialNumber: syz [ 83.657793][ T4364] usb 1-1: config 0 descriptor?? [ 83.720805][ T4364] gspca_main: se401-2.14.0 probing 047d:5003 [ 84.185932][ T4364] gspca_se401: Wrong descriptor type [ 84.436063][ T4233] usb 1-1: USB disconnect, device number 3 [ 84.451624][ T4595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'. [ 84.754604][ T4284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.884659][ T4284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.946284][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 84.972470][ T4605] netlink: 'syz.2.79': attribute type 5 has an invalid length. [ 84.980703][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 84.999759][ T4605] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 85.033042][ T4605] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 85.057911][ T4605] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 85.072584][ T4605] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 85.133127][ T4605] device geneve2 entered promiscuous mode [ 85.160797][ T4284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.240857][ T4284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.737932][ T4284] tipc: Left network mode [ 85.817765][ T4614] chnl_net:caif_netlink_parms(): no params data found [ 86.165830][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.172955][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.189932][ T4614] device bridge_slave_0 entered promiscuous mode [ 86.236300][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.262124][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.279826][ T4614] device bridge_slave_1 entered promiscuous mode [ 86.389464][ T4614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.440782][ T4614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.548427][ T4614] team0: Port device team_slave_0 added [ 86.571632][ T4614] team0: Port device team_slave_1 added [ 86.698203][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.705215][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.739675][ T4614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.785218][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.804296][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.849415][ T7] cfg80211: failed to load regulatory.db [ 86.856582][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.924785][ T4614] device hsr_slave_0 entered promiscuous mode [ 86.943372][ T4614] device hsr_slave_1 entered promiscuous mode [ 86.962225][ T4614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.985569][ T4614] Cannot create hsr debugfs directory [ 86.996095][ T4634] chnl_net:caif_netlink_parms(): no params data found [ 87.134122][ T4675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.100'. [ 87.246858][ T4234] Bluetooth: hci1: command 0x0409 tx timeout [ 87.427331][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.434495][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.453984][ T4634] device bridge_slave_0 entered promiscuous mode [ 87.467455][ T4685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.101'. [ 87.539919][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.561888][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.593871][ T4634] device bridge_slave_1 entered promiscuous mode [ 87.708981][ T4284] device hsr_slave_0 left promiscuous mode [ 87.723887][ T4284] device hsr_slave_1 left promiscuous mode [ 87.745116][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.784105][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.904549][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.966785][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 88.070663][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.197871][ T4284] device bridge_slave_1 left promiscuous mode [ 88.324987][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.658926][ T4284] device bridge_slave_0 left promiscuous mode [ 88.665219][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.697879][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 88.730846][ T4284] device veth1_macvtap left promiscuous mode [ 88.746941][ T4284] device veth0_macvtap left promiscuous mode [ 88.753088][ T4284] device veth1_vlan left promiscuous mode [ 88.759587][ T4284] device veth0_vlan left promiscuous mode [ 89.247925][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 89.275668][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 89.304151][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.326721][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 89.342195][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.500563][ T4284] bond0 (unregistering): Released all slaves [ 89.709171][ T4657] chnl_net:caif_netlink_parms(): no params data found [ 89.741070][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 89.745293][ T4634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.795258][ T4634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.932163][ T4634] team0: Port device team_slave_0 added [ 89.976966][ T4634] team0: Port device team_slave_1 added [ 90.045716][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 90.117468][ T4614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.149526][ T4203] Bluetooth: Frame is too long (len 18, expected len 4) [ 90.175160][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.199173][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.225140][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.270776][ T4634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.293777][ T4614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.308853][ T4614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.335915][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.344001][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.377893][ T4657] device bridge_slave_0 entered promiscuous mode [ 90.387054][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.394282][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.422126][ T4634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.463655][ T4614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.485319][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.571267][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.624256][ T4657] device bridge_slave_1 entered promiscuous mode [ 90.681718][ T4657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.765633][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 90.773839][ T4657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.934663][ T4634] device hsr_slave_0 entered promiscuous mode [ 90.965942][ T4634] device hsr_slave_1 entered promiscuous mode [ 90.976294][ T4634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.004815][ T4634] Cannot create hsr debugfs directory [ 91.249967][ T4657] team0: Port device team_slave_0 added [ 91.536908][ T4657] team0: Port device team_slave_1 added [ 92.068445][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.085119][ T2299] Bluetooth: hci1: command 0x040f tx timeout [ 92.125731][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 92.133515][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.156461][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.252687][ T4657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.486476][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.505961][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.559150][ T4657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.593877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.612150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.657515][ T4614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.691540][ T4789] xt_hashlimit: size too large, truncated to 1048576 [ 92.833982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.845628][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 92.867146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.894580][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.901779][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.996489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.018737][ T4657] device hsr_slave_0 entered promiscuous mode [ 93.044346][ T4657] device hsr_slave_1 entered promiscuous mode [ 93.066892][ T4657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.074697][ T4657] Cannot create hsr debugfs directory [ 93.143508][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.164143][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.195103][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.202312][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.289334][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.314041][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.351631][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.377341][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.726900][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.770623][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.907598][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.135908][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 94.588863][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 94.629345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.656400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.677051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.686160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.737265][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.817056][ T4634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.878623][ T4634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.908866][ T4634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.925937][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 94.981949][ T4634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.069186][ T4657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 95.126771][ T4657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 95.163163][ T4657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 95.245672][ T4657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 95.356275][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.371302][ T4634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.388652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.406180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.477824][ T4634] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.505147][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.531762][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.578514][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.611762][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.633945][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.641133][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.667040][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.686300][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.703945][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.711122][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.768573][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.787514][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.819342][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.880954][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.923142][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.958707][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.978970][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.996360][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.004892][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.032025][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.067108][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.076138][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.102146][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.139884][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.192300][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.207211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.258036][ T4657] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.289581][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.323783][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.366614][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.373732][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.460271][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.487351][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.506724][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.534768][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.542018][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.566844][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.586194][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.636566][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.657612][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.677435][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.694516][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.714017][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.736621][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.806398][ T4284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.880371][ T4614] device veth0_vlan entered promiscuous mode [ 96.892017][ T4657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.924303][ T4657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.947326][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.966946][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.977788][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.997014][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.034500][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.056323][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.064144][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.115254][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.137221][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.160612][ T4634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.193834][ T4284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.255898][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.263733][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.302831][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.368773][ T4614] device veth1_vlan entered promiscuous mode [ 97.417926][ T4284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.511584][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.531592][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.577099][ T4614] device veth0_macvtap entered promiscuous mode [ 97.616471][ T4284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.682134][ T4614] device veth1_macvtap entered promiscuous mode [ 97.757351][ T4868] fuse: Bad value for 'fd' [ 97.781378][ T4868] process 'syz.2.136' launched './file0' with NULL argv: empty string added [ 97.788329][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.821449][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.855480][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.885471][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.895331][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.925497][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.955230][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.988110][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.008805][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.026709][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.039163][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.066554][ T4657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.079433][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.102019][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.123091][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.165707][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.215567][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.257101][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.275976][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.403483][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.412055][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.435872][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.446572][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.636474][ T4614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.645252][ T4614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.672476][ T4614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.707047][ T4614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.445548][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.484271][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.657564][ T4634] device veth0_vlan entered promiscuous mode [ 99.664214][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.696401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.720319][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.746998][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.882497][ T4634] device veth1_vlan entered promiscuous mode [ 99.987633][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.004923][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.026532][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.056407][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.136765][ T4634] device veth0_macvtap entered promiscuous mode [ 100.148253][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.180067][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.219572][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.250383][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.275019][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.285321][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.316419][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.328634][ T4634] device veth1_macvtap entered promiscuous mode [ 100.348664][ T4657] device veth0_vlan entered promiscuous mode [ 100.387521][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.397134][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.414436][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.461306][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 100.485897][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.640116][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.718674][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.213437][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.271305][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.292923][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.321195][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.355612][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.385472][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.425490][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.453925][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.485154][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.513785][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.531493][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.553455][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.590588][ T4657] device veth1_vlan entered promiscuous mode [ 101.675056][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.699736][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.734369][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.767355][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.798986][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.837282][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.864994][ T4634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.904709][ T4634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.946232][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.957268][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.978759][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.071525][ T4634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.092277][ T4634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.116029][ T4634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.124890][ T4634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.201436][ T4657] device veth0_macvtap entered promiscuous mode [ 102.257087][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.280026][ T4952] fuse: Bad value for 'fd' [ 102.283007][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.346721][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.450611][ T4657] device veth1_macvtap entered promiscuous mode [ 102.539006][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.565696][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.603801][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.636617][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.686374][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.705486][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.734936][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.758862][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.795467][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.846708][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.883772][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.930706][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.991751][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.016238][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.038415][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.062037][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.082515][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.110202][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.137180][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.162482][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.183850][ T4657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.220036][ T4657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.277407][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.299286][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.316505][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.354382][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.373121][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.438205][ T4657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.475697][ T4657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.484561][ T4657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.505542][ T4657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.555063][ T4962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.566987][ T4962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 103.791525][ T4962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.804086][ T4962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 103.846931][ T4284] device hsr_slave_0 left promiscuous mode [ 103.853819][ T4284] device hsr_slave_1 left promiscuous mode [ 103.861680][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.870065][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.880301][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.888850][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.897695][ T4284] device bridge_slave_1 left promiscuous mode [ 103.904014][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.913523][ T4284] device bridge_slave_0 left promiscuous mode [ 103.921453][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.934432][ T4284] device veth1_macvtap left promiscuous mode [ 103.940644][ T4284] device veth0_macvtap left promiscuous mode [ 103.946941][ T4284] device veth1_vlan left promiscuous mode [ 103.953104][ T4284] device veth0_vlan left promiscuous mode [ 105.533427][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 105.557940][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 105.592050][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.639607][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.760227][ T4284] bond0 (unregistering): Released all slaves [ 105.862202][ T4962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.872752][ T4962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 106.006485][ T4962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.025632][ T4962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 106.125920][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 106.157982][ T4962] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 106.169288][ T4962] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.198780][ T4962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 106.210928][ T4962] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.228721][ T4962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 106.237184][ T4962] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.253801][ T4962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 106.262444][ T4962] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.357229][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.372545][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.443059][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.506397][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.514723][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.670778][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.509098][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.520428][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.531175][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.538687][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.626582][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.643771][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.885240][ T5043] deleting an unspecified loop device is not supported. [ 110.486584][ T5075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.798514][ T4238] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 114.848377][ T4238] Bluetooth: hci4: Injecting HCI hardware error event [ 114.856479][ T4203] Bluetooth: hci4: hardware error 0x00 [ 114.877583][ T5108] bridge0: port 3(syz_tun) entered blocking state [ 114.889974][ T5108] bridge0: port 3(syz_tun) entered disabled state [ 115.057650][ T5108] device syz_tun entered promiscuous mode [ 115.134215][ T5118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.150109][ T5108] bridge0: port 3(syz_tun) entered blocking state [ 115.156700][ T5108] bridge0: port 3(syz_tun) entered forwarding state [ 115.735813][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.204'. [ 115.770417][ T5140] netlink: 'syz.5.204': attribute type 5 has an invalid length. [ 115.779942][ T5140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.204'. [ 115.797785][ T5140] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 115.808748][ T5140] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 115.818355][ T5140] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 115.829792][ T5140] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 115.838919][ T5140] device geneve2 entered promiscuous mode [ 116.262884][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 116.926283][ T4364] Bluetooth: hci2: command 0x0409 tx timeout [ 117.727997][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.738412][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.747555][ T5106] device bridge_slave_0 entered promiscuous mode [ 117.767128][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.785552][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.793895][ T5106] device bridge_slave_1 entered promiscuous mode [ 117.824619][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.848756][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.901491][ T5177] bridge0: port 1(syz_tun) entered blocking state [ 117.926232][ T5177] bridge0: port 1(syz_tun) entered disabled state [ 117.979966][ T5177] device syz_tun entered promiscuous mode [ 118.023076][ T5177] bridge0: port 1(syz_tun) entered blocking state [ 118.029720][ T5177] bridge0: port 1(syz_tun) entered forwarding state [ 118.119400][ T5106] team0: Port device team_slave_0 added [ 118.209001][ T5106] team0: Port device team_slave_1 added [ 118.262625][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.273023][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.311193][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.005984][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 119.758326][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.785589][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.870497][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.892278][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 119.930320][ T5209] netlink: 'syz.2.216': attribute type 5 has an invalid length. [ 119.946475][ T5209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 120.133565][ T5106] device hsr_slave_0 entered promiscuous mode [ 120.158931][ T5106] device hsr_slave_1 entered promiscuous mode [ 120.174394][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.184140][ T5106] Cannot create hsr debugfs directory [ 120.217432][ T4284] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.346551][ T4284] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.464207][ T4284] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.571695][ T4284] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.196809][ T5106] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.765027][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 121.856150][ T5106] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.937448][ T5106] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.967990][ T5273] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 121.987169][ T5273] netlink: 'syz.4.222': attribute type 2 has an invalid length. [ 122.051644][ T5106] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.674237][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.784025][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.830536][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.839702][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.965874][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.983455][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.034853][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.042047][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.105534][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.117437][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.146245][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.153362][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.223400][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 123.245905][ T5298] netlink: 'syz.4.228': attribute type 5 has an invalid length. [ 123.276088][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 123.308062][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.341019][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.406090][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.440783][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.497305][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.536902][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.796256][ T5106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.808098][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 123.842225][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.885909][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.901052][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.951767][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.134658][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.188984][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.236093][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.287377][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.711800][ T5322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.233'. [ 124.743917][ T5322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.233'. [ 124.786996][ T5327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.233'. [ 124.937439][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.944985][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.973448][ T5333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.030553][ T4284] device hsr_slave_0 left promiscuous mode [ 125.039783][ T4284] device hsr_slave_1 left promiscuous mode [ 125.061013][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.075381][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.092399][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.100194][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.110238][ T4284] device bridge_slave_1 left promiscuous mode [ 125.117056][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.127439][ T4284] device bridge_slave_0 left promiscuous mode [ 125.133753][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.152150][ T4284] device veth1_macvtap left promiscuous mode [ 125.158775][ T4284] device veth0_macvtap left promiscuous mode [ 125.165048][ T4284] device veth1_vlan left promiscuous mode [ 125.171803][ T4284] device veth0_vlan left promiscuous mode [ 125.487378][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 125.503611][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 125.522060][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.538753][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.611625][ T4284] bond0 (unregistering): Released all slaves [ 125.663258][ T5333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.673137][ T5337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.692303][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.719968][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.847328][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 125.915744][ T5355] netlink: 'syz.2.238': attribute type 5 has an invalid length. [ 127.362793][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.381933][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.508935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.546305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.587899][ T5106] device veth0_vlan entered promiscuous mode [ 127.630080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.641610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.686037][ T5401] netlink: 'syz.4.249': attribute type 5 has an invalid length. [ 127.736538][ T5106] device veth1_vlan entered promiscuous mode [ 127.805128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.836294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.856932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.906475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.916969][ T5106] device veth0_macvtap entered promiscuous mode [ 127.931366][ T5106] device veth1_macvtap entered promiscuous mode [ 128.190514][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.340590][ T5424] __nla_validate_parse: 3 callbacks suppressed [ 128.340755][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.256'. [ 128.678916][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.944938][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.019397][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.093907][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.218099][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.232846][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.244152][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.258285][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.305086][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.325065][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.334914][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.347785][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.382718][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.413176][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.438834][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.457006][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.515800][ T5440] netlink: 72 bytes leftover after parsing attributes in process `syz.6.262'. [ 129.533433][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.563143][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.631171][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.642922][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.661671][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.690020][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.774056][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.059783][ T5457] netlink: 'syz.4.266': attribute type 29 has an invalid length. [ 130.100197][ T5457] netlink: 'syz.4.266': attribute type 29 has an invalid length. [ 130.166898][ T5459] netlink: 'syz.4.266': attribute type 29 has an invalid length. [ 130.214730][ T5460] netlink: 'syz.4.266': attribute type 29 has an invalid length. [ 130.234067][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 130.272268][ T5451] netlink: 'syz.2.263': attribute type 5 has an invalid length. [ 130.305891][ T5451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 130.368973][ T5106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.387866][ T5106] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.405500][ T5106] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.489511][ T5106] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.508672][ T5469] netlink: 'syz.6.271': attribute type 2 has an invalid length. [ 130.545644][ T5469] netlink: 'syz.6.271': attribute type 1 has an invalid length. [ 132.931277][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937666][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.186655][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.285110][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.296127][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.296430][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.314408][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.790284][ T5524] netlink: 'syz.5.281': attribute type 29 has an invalid length. [ 134.906323][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.995596][ T5524] netlink: 'syz.5.281': attribute type 29 has an invalid length. [ 135.041777][ T5527] netlink: 'syz.5.281': attribute type 29 has an invalid length. [ 135.100224][ T5530] netlink: 'syz.5.281': attribute type 29 has an invalid length. [ 135.320658][ T5542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.472857][ T5542] device bond1 entered promiscuous mode [ 135.542367][ T5547] device bond2 entered promiscuous mode [ 136.801260][ T4925] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.079622][ T4925] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.132090][ T5590] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 137.324559][ T5590] device bond1 entered promiscuous mode [ 137.643870][ T5597] device bond2 entered promiscuous mode [ 137.704983][ T4925] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.811995][ T5611] netlink: 'syz.4.310': attribute type 2 has an invalid length. [ 137.840399][ T5611] netlink: 164 bytes leftover after parsing attributes in process `syz.4.310'. [ 137.855678][ T5616] netlink: 'syz.5.311': attribute type 29 has an invalid length. [ 137.939107][ T5618] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 137.974925][ T5616] netlink: 'syz.5.311': attribute type 29 has an invalid length. [ 137.996648][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 138.072029][ T5619] netlink: 'syz.5.311': attribute type 29 has an invalid length. [ 138.135689][ T5623] netlink: 'syz.5.311': attribute type 29 has an invalid length. [ 138.915125][ T4925] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.319280][ T5637] netlink: 164 bytes leftover after parsing attributes in process `syz.5.316'. [ 139.495362][ T4238] Bluetooth: hci2: command 0x0409 tx timeout [ 139.672160][ T5650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 140.038481][ T5662] device syzkaller0 entered promiscuous mode [ 140.077147][ T5662] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 141.202950][ T5601] chnl_net:caif_netlink_parms(): no params data found [ 141.209954][ T5679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.331'. [ 141.391298][ T5688] validate_nla: 1 callbacks suppressed [ 141.391314][ T5688] netlink: 'syz.6.334': attribute type 29 has an invalid length. [ 141.418783][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.430667][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.478787][ T5601] device bridge_slave_0 entered promiscuous mode [ 141.494609][ T5688] netlink: 'syz.6.334': attribute type 29 has an invalid length. [ 141.554833][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.564978][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.572492][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 141.582873][ T5601] device bridge_slave_1 entered promiscuous mode [ 141.614539][ T5694] netlink: 'syz.6.334': attribute type 29 has an invalid length. [ 141.728776][ T5699] tipc: Started in network mode [ 141.744243][ T5699] tipc: Node identity c67001abf4bd, cluster identity 4711 [ 141.768800][ T5699] tipc: Enabled bearer , priority 0 [ 141.822375][ T5704] tipc: Resetting bearer [ 141.850540][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.917422][ T5698] tipc: Disabling bearer [ 141.982492][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.041281][ T5728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 142.100421][ T5601] team0: Port device team_slave_0 added [ 142.125282][ T5728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 142.156292][ T5729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 142.173323][ T5601] team0: Port device team_slave_1 added [ 142.195925][ T5734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 142.358101][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.365111][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.474366][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.488127][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.497146][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.529504][ T5749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.352'. [ 142.539158][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.710954][ T5601] device hsr_slave_0 entered promiscuous mode [ 142.736968][ T5601] device hsr_slave_1 entered promiscuous mode [ 142.760929][ T5601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.769553][ T5601] Cannot create hsr debugfs directory [ 142.948805][ T5760] tipc: Enabled bearer , priority 0 [ 142.961499][ T5763] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.100491][ T5764] device bond3 entered promiscuous mode [ 143.164031][ T5763] device bond4 entered promiscuous mode [ 143.208675][ T5760] tipc: Resetting bearer [ 143.303805][ T4925] device hsr_slave_0 left promiscuous mode [ 143.368413][ T4925] device hsr_slave_1 left promiscuous mode [ 143.445923][ T4925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.453431][ T4925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.517446][ T4925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.525111][ T4925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.604889][ T4925] device bridge_slave_1 left promiscuous mode [ 143.614459][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.645631][ T2299] Bluetooth: hci2: command 0x040f tx timeout [ 143.716160][ T4925] device bridge_slave_0 left promiscuous mode [ 143.722423][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.808958][ T4925] device veth1_macvtap left promiscuous mode [ 143.820724][ T4925] device veth0_macvtap left promiscuous mode [ 143.838357][ T4925] device veth1_vlan left promiscuous mode [ 143.861030][ T4925] device veth0_vlan left promiscuous mode [ 144.436143][ T4925] team0 (unregistering): Port device team_slave_1 removed [ 144.457974][ T4925] team0 (unregistering): Port device team_slave_0 removed [ 144.471806][ T4925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.486882][ T4925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.569185][ T4925] bond0 (unregistering): Released all slaves [ 144.628854][ T5756] tipc: Disabling bearer [ 144.651714][ T4238] tipc: Node number set to 852296107 [ 144.760499][ T5804] __nla_validate_parse: 3 callbacks suppressed [ 144.760517][ T5804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.365'. [ 144.807560][ T5804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.365'. [ 144.860619][ T5807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.365'. [ 144.890258][ T5804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.365'. [ 144.939027][ T5812] netlink: 'syz.6.368': attribute type 29 has an invalid length. [ 144.977927][ T5812] netlink: 'syz.6.368': attribute type 29 has an invalid length. [ 145.021478][ T5815] netlink: 'syz.6.368': attribute type 29 has an invalid length. [ 145.052249][ T5601] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 145.082175][ T5818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.370'. [ 145.085557][ T5601] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 145.124396][ T5812] netlink: 'syz.6.368': attribute type 29 has an invalid length. [ 145.144732][ T5601] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 145.161118][ T5601] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.195814][ T5818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.370'. [ 145.206107][ T5821] netlink: 60 bytes leftover after parsing attributes in process `syz.4.370'. [ 145.270987][ T5822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.370'. [ 145.456180][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.131445][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.218980][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.333354][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 146.452109][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.495746][ T5842] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 146.536084][ T5842] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 146.586796][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.603447][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.686707][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.693845][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.722904][ T5842] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 146.745992][ T5844] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 146.796258][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.809738][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.837299][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.896097][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.903258][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.940364][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.004263][ T5848] tipc: Enabling of bearer rejected, failed to enable media [ 147.132819][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.142807][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.184906][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.236454][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.267098][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.290279][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.304644][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 147.347149][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.367745][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.384327][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.394058][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.419543][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.381'. [ 147.449296][ T5869] tipc: Enabling of bearer rejected, failed to enable media [ 147.477929][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.474901][ T5894] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 148.655566][ T5894] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 148.777028][ T5894] netlink: 'syz.2.388': attribute type 29 has an invalid length. [ 148.862408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.891373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.928074][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.008997][ T5929] __nla_validate_parse: 56 callbacks suppressed [ 150.009015][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.398'. [ 150.024652][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.398'. [ 150.036865][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.398'. [ 150.051106][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.398'. [ 150.225668][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 150.234625][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 150.439900][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 150.456369][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 150.481514][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.497348][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.613116][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.636486][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.645343][ T5961] netlink: 'syz.6.408': attribute type 29 has an invalid length. [ 150.667598][ T5601] device veth0_vlan entered promiscuous mode [ 150.695071][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.717282][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.933799][ T5961] netlink: 'syz.6.408': attribute type 29 has an invalid length. [ 150.945970][ T5967] netlink: 'syz.6.408': attribute type 29 has an invalid length. [ 151.804352][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.5.410'. [ 151.880510][ T5970] netlink: 'syz.6.408': attribute type 29 has an invalid length. [ 151.903348][ T5975] netlink: 60 bytes leftover after parsing attributes in process `syz.5.410'. [ 151.925491][ T5601] device veth1_vlan entered promiscuous mode [ 152.028674][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.053847][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.092084][ T5601] device veth0_macvtap entered promiscuous mode [ 152.113980][ T5601] device veth1_macvtap entered promiscuous mode [ 152.199543][ T5988] tipc: Enabled bearer , priority 0 [ 152.274465][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.473012][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.604177][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.651784][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.695849][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.744502][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.756270][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.770937][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.787187][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.795482][ T5994] device syzkaller0 entered promiscuous mode [ 152.828736][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.870900][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.918908][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.953864][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.976841][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.010566][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.041736][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.070335][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.081631][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.094673][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.107330][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.120989][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.144860][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.164018][ T5994] tipc: Resetting bearer [ 153.200675][ T5994] tipc: Disabling bearer [ 153.231427][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.289312][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.314027][ T5601] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.324205][ T5601] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.342135][ T5601] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.354988][ T5601] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.873916][ T6051] device bond1 entered promiscuous mode [ 154.894140][ T5149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.945674][ T5149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.991547][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.083619][ T5149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.126264][ T5149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.142610][ T6065] tipc: Started in network mode [ 155.176093][ T6065] tipc: Node identity 0efb06003bc6, cluster identity 4711 [ 155.196645][ T6065] tipc: Enabled bearer , priority 0 [ 155.296139][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.345975][ T6073] device syzkaller0 entered promiscuous mode [ 155.979451][ T6073] tipc: Resetting bearer [ 156.016756][ T6081] __nla_validate_parse: 10 callbacks suppressed [ 156.016774][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.441'. [ 157.369851][ T6064] tipc: Resetting bearer [ 157.496818][ T6064] tipc: Disabling bearer [ 157.525583][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.6.441'. [ 157.567129][ T6090] netlink: 60 bytes leftover after parsing attributes in process `syz.6.441'. [ 157.588142][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.9.304'. [ 157.627140][ T1108] tipc: Node number set to 893191680 [ 157.646127][ T6091] netlink: 60 bytes leftover after parsing attributes in process `syz.6.441'. [ 157.912816][ T6117] netlink: 'syz.6.448': attribute type 29 has an invalid length. [ 157.963336][ T6123] netlink: 'syz.9.450': attribute type 29 has an invalid length. [ 157.980046][ T6115] device bond3 entered promiscuous mode [ 158.055167][ T6123] netlink: 'syz.9.450': attribute type 29 has an invalid length. [ 158.076086][ T6117] netlink: 'syz.6.448': attribute type 29 has an invalid length. [ 158.093899][ T6124] netlink: 'syz.6.448': attribute type 29 has an invalid length. [ 158.120774][ T6127] netlink: 'syz.9.450': attribute type 29 has an invalid length. [ 158.152062][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 158.214884][ T6128] netlink: 'syz.6.448': attribute type 29 has an invalid length. [ 158.586568][ T6145] tipc: Enabling of bearer rejected, failed to enable media [ 159.889205][ T6156] netlink: 9 bytes leftover after parsing attributes in process `syz.4.459'. [ 160.688778][ T6177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 160.756591][ T6177] device bond5 entered promiscuous mode [ 160.870307][ T6188] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 160.880329][ T6188] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 160.893579][ T6188] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 163.339564][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.9.489'. [ 163.374290][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.9.489'. [ 163.428749][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.9.489'. [ 163.463195][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.9.489'. [ 165.392138][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 166.375370][ T6290] syz.2.500 uses obsolete (PF_INET,SOCK_PACKET) [ 166.850903][ T6321] validate_nla: 10 callbacks suppressed [ 166.850920][ T6321] netlink: 'syz.4.510': attribute type 16 has an invalid length. [ 166.926123][ T6321] netlink: 'syz.4.510': attribute type 17 has an invalid length. [ 167.867734][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.875379][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.845434][ T6361] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.428854][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.480086][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.846862][ T6321] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.856100][ T6321] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.864965][ T6321] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.874420][ T6321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.973028][ T6321] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 170.982561][ T6321] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 170.992614][ T6321] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 171.001563][ T6321] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 171.011007][ T6321] device geneve2 left promiscuous mode [ 171.022505][ T6321] device bond1 left promiscuous mode [ 171.034698][ T6321] device bond3 left promiscuous mode [ 171.046965][ T6335] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 171.075572][ T6321] syz.4.510 (6321) used greatest stack depth: 19920 bytes left [ 171.134384][ T6361] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 172.719692][ T6412] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.939360][ T6412] device bond7 entered promiscuous mode [ 173.057299][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 173.103595][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 173.115090][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 174.714600][ T4270] vxcan1 speed is unknown, defaulting to 1000 [ 174.800777][ T6421] infiniband syz2: set active [ 174.857038][ T6421] infiniband syz2: added vxcan1 [ 174.962586][ T6421] infiniband syz2: Couldn't open port 1 [ 174.998029][ T6453] device syzkaller0 entered promiscuous mode [ 175.111896][ T6421] RDS/IB: syz2: added [ 175.126259][ T6421] smc: adding ib device syz2 with port count 1 [ 175.132712][ T6421] smc: ib device syz2 port 1 has pnetid [ 175.245892][ T6342] vxcan1 speed is unknown, defaulting to 1000 [ 175.280837][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 175.464356][ T6473] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 175.518526][ T6477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.572584][ T6473] device bond3 entered promiscuous mode [ 175.816618][ T4270] Bluetooth: hci2: command 0x0405 tx timeout [ 176.558436][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 176.947191][ T4274] nci: nci_ntf_packet: unknown ntf opcode 0x132 [ 177.029890][ T6511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.087647][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.5.563'. [ 177.111402][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 177.214472][ T6519] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 177.263419][ T6519] device bond8 entered promiscuous mode [ 177.379352][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 178.827921][ T6498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.039310][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 179.335600][ T6540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.610367][ T6552] device bond1 entered promiscuous mode [ 179.616941][ T6421] vxcan1 speed is unknown, defaulting to 1000 [ 181.734700][ T6576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.832552][ T6583] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 182.012475][ T6583] device bond4 entered promiscuous mode [ 182.199256][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.206781][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.408247][ T6595] device bond1 entered promiscuous mode [ 182.508608][ T6595] netlink: 36 bytes leftover after parsing attributes in process `syz.9.602'. [ 185.617594][ T6662] netlink: 72 bytes leftover after parsing attributes in process `syz.9.614'. [ 186.285710][ T4194] Bluetooth: hci3: command 0x0406 tx timeout [ 186.430518][ T6674] tipc: Started in network mode [ 186.446722][ T6674] tipc: Node identity 2a813d1b3292, cluster identity 4711 [ 186.454025][ T6674] tipc: Enabled bearer , priority 0 [ 186.517551][ T6678] device syzkaller0 entered promiscuous mode [ 186.628141][ T6674] tipc: Resetting bearer [ 186.679974][ T6669] tipc: Resetting bearer [ 186.733907][ T6686] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 186.813269][ T6669] tipc: Disabling bearer [ 187.165525][ T4194] Bluetooth: hci2: command 0x0407 tx timeout [ 189.602855][ T6745] device syzkaller0 entered promiscuous mode [ 190.808386][ T6754] device syzkaller0 entered promiscuous mode [ 191.944567][ T6754] tipc: Enabled bearer , priority 0 [ 191.980690][ T6753] tipc: Resetting bearer [ 192.444255][ T6753] tipc: Disabling bearer [ 194.369195][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375583][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434554][ T6812] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.517000][ T6812] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 195.433242][ T6822] ODEBUG: Out of memory. ODEBUG disabled [ 195.917563][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 196.107337][ T6854] unsupported nla_type 40 [ 198.852948][ T6934] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 198.895279][ T6934] netlink: 'syz.2.698': attribute type 2 has an invalid length. [ 199.124761][ T6949] device ip6gretap0 entered promiscuous mode [ 199.146003][ T6949] device vlan2 entered promiscuous mode [ 199.738018][ T6972] device syzkaller0 entered promiscuous mode [ 199.813406][ T6972] tipc: Enabled bearer , priority 0 [ 199.861383][ T6971] tipc: Resetting bearer [ 199.917695][ T6971] tipc: Disabling bearer [ 200.321056][ T7012] netlink: 27 bytes leftover after parsing attributes in process `syz.2.715'. [ 200.378940][ T7017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.942434][ T7040] device bond2 entered promiscuous mode [ 200.998147][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.9.724'. [ 201.142010][ T7043] device syzkaller1 entered promiscuous mode [ 202.184122][ T7067] device syzkaller0 entered promiscuous mode [ 202.527272][ T7083] smc: removing ib device syz2 [ 202.748626][ T7086] netlink: 'syz.6.734': attribute type 3 has an invalid length. [ 203.710474][ T7100] device bond3 entered promiscuous mode [ 203.933578][ T7105] netlink: 48 bytes leftover after parsing attributes in process `syz.9.739'. [ 204.647176][ T7126] ffs_data_put(): freeing [ 204.682058][ T7128] device syzkaller0 entered promiscuous mode [ 204.724498][ T7126] netlink: 84 bytes leftover after parsing attributes in process `syz.2.746'. [ 204.761961][ T7128] tipc: Enabled bearer , priority 0 [ 204.820599][ T7128] tipc: Resetting bearer [ 204.917080][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.924650][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.343137][ T7127] tipc: Resetting bearer [ 205.456069][ T7127] tipc: Disabling bearer [ 206.113930][ T7170] device syzkaller1 entered promiscuous mode [ 206.368831][ T7194] ffs_data_put(): freeing [ 206.430055][ T7194] netlink: 84 bytes leftover after parsing attributes in process `syz.2.761'. [ 206.491162][ T7201] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 206.647623][ T7201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.689499][ T7246] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.757709][ T7245] netlink: 84 bytes leftover after parsing attributes in process `syz.6.774'. [ 207.814792][ T4634] ffs_data_put(): freeing [ 207.944685][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.777'. [ 208.008429][ T7256] netlink: 60 bytes leftover after parsing attributes in process `syz.6.777'. [ 208.009164][ T7261] netlink: 'syz.6.777': attribute type 1 has an invalid length. [ 208.816165][ T7305] ffs_data_put(): freeing [ 208.874616][ T7305] netlink: 84 bytes leftover after parsing attributes in process `syz.2.787'. [ 209.791528][ T4200] ------------[ cut here ]------------ [ 209.799252][ T4200] WARNING: CPU: 1 PID: 4200 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 209.812194][ T4200] Modules linked in: [ 209.818220][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 209.828926][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.842451][ T4200] Workqueue: hci1 hci_conn_timeout [ 209.849767][ T4200] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 209.857954][ T4200] Code: 8b 8d e8 a4 74 de f8 48 8b 35 75 5e ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 25 6e f8 e8 c1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 209.885009][ T4200] RSP: 0018:ffffc9000302fc08 EFLAGS: 00010293 [ 209.893247][ T4200] RAX: ffffffff88dfafbf RBX: ffff88807a464138 RCX: ffff88801a191dc0 [ 209.903865][ T4200] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 209.914066][ T4200] RBP: 00000000ffffffff R08: ffff88807a464013 R09: 1ffff1100f48c802 [ 209.925043][ T4200] R10: dffffc0000000000 R11: ffffed100f48c803 R12: ffff88805f43c408 [ 209.935090][ T4200] R13: dffffc0000000000 R14: ffff88807a464000 R15: ffff88807a464010 [ 209.947137][ T4200] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 209.958402][ T4200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.966821][ T4200] CR2: 00007f49dc68ed58 CR3: 0000000048bee000 CR4: 00000000003506e0 [ 209.977778][ T4200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.988117][ T4200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.998868][ T4200] Call Trace: [ 210.002897][ T4200] [ 210.006774][ T4200] process_one_work+0x867/0xff0 [ 210.015210][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 210.022730][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 210.029525][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 210.037731][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 210.059247][ T4200] ? wq_worker_running+0x97/0x170 [ 210.065513][ T4200] worker_thread+0xad7/0x12a0 [ 210.071609][ T4200] kthread+0x42e/0x520 [ 210.076670][ T4200] ? rcu_lock_release+0x20/0x20 [ 210.082436][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 210.088969][ T4200] ret_from_fork+0x1f/0x30 [ 210.094754][ T4200] [ 210.098636][ T4200] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.105944][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 210.113632][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.123812][ T4200] Workqueue: hci1 hci_conn_timeout [ 210.128968][ T4200] Call Trace: [ 210.132266][ T4200] [ 210.135212][ T4200] dump_stack_lvl+0x188/0x250 [ 210.139918][ T4200] ? show_regs_print_info+0x20/0x20 [ 210.145170][ T4200] ? load_image+0x410/0x410 [ 210.149733][ T4200] panic+0x2f8/0x850 [ 210.153853][ T4200] ? bpf_jit_dump+0xd0/0xd0 [ 210.158499][ T4200] ? ret_from_fork+0x1f/0x30 [ 210.163304][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 210.168369][ T4200] __warn+0x248/0x2b0 [ 210.172415][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 210.177476][ T4200] report_bug+0x1b9/0x2e0 [ 210.181846][ T4200] handle_bug+0x3a/0x70 [ 210.186037][ T4200] exc_invalid_op+0x16/0x40 [ 210.190578][ T4200] asm_exc_invalid_op+0x16/0x20 [ 210.195467][ T4200] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 210.201161][ T4200] Code: 8b 8d e8 a4 74 de f8 48 8b 35 75 5e ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 25 6e f8 e8 c1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 210.220818][ T4200] RSP: 0018:ffffc9000302fc08 EFLAGS: 00010293 [ 210.226936][ T4200] RAX: ffffffff88dfafbf RBX: ffff88807a464138 RCX: ffff88801a191dc0 [ 210.234952][ T4200] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 210.242966][ T4200] RBP: 00000000ffffffff R08: ffff88807a464013 R09: 1ffff1100f48c802 [ 210.250983][ T4200] R10: dffffc0000000000 R11: ffffed100f48c803 R12: ffff88805f43c408 [ 210.259029][ T4200] R13: dffffc0000000000 R14: ffff88807a464000 R15: ffff88807a464010 [ 210.267049][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 210.272135][ T4200] ? hci_conn_timeout+0x24f/0x450 [ 210.277209][ T4200] process_one_work+0x867/0xff0 [ 210.282210][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 210.287878][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 210.293215][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 210.298403][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 210.304719][ T4200] ? wq_worker_running+0x97/0x170 [ 210.309802][ T4200] worker_thread+0xad7/0x12a0 [ 210.314546][ T4200] kthread+0x42e/0x520 [ 210.318648][ T4200] ? rcu_lock_release+0x20/0x20 [ 210.323532][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 210.328157][ T4200] ret_from_fork+0x1f/0x30 [ 210.332619][ T4200] [ 210.335742][ T4200] Kernel Offset: disabled [ 210.340421][ T4200] Rebooting in 86400 seconds..