last executing test programs: 4.419497993s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) setresgid(0xee00, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r5}) 4.227862945s ago: executing program 0 (id=1): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.182862961s ago: executing program 3 (id=6): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffff63) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b1a033f2511a8aaaaaaaabb88a80c0081003c0008004508005c0000000000119078e040000100000000000000000048907803000000030000001453c8380bea51a47b99ede0430f8e2b2a505e0149587721ecf4aba3f602a914d700cfb0e17e1af2787697780b34cee92233b7b7cdf5e01c0f2598"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) syz_open_dev$sndmidi(&(0x7f0000000280), 0x5, 0x1c800) syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0xe80c0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}, {0x0}], 0x2}], 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0x1) 3.181743401s ago: executing program 0 (id=7): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 2.758098718s ago: executing program 3 (id=8): pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffbb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000001c0)={0x60, 0xb, 0x9, 0x4, 0x0, 0x5, 0x0}) 1.099835343s ago: executing program 0 (id=9): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$video(0x0, 0xa4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 1.056659144s ago: executing program 3 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r3, 0x0, 0x16500000) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='binder\x00', 0x2800003, 0x0) mkdir(0x0, 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) 232.220966ms ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9859, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc41, 0x0) sendto$inet6(r6, &(0x7f0000000380)="47487f524345eae0e6ddad1449d22b5c08b67a7ce40676c0bb52d00fd4f3058e77dd08c50d02ca73843135c628639c8c73da505f18ba73e851ad4a650deaf6a2cf0c28253067afd521d3cc268e94031ec139b417c8a8e615c0b41daa1f2a0b285d01ed53959ced70012e06b40231e40ffe40bbed722a23e5ed79877460fa0d3a919d0ca6fff30cbc3f58770c295f9c46d4d128fe688df06493da823860e09de0848adc42cdea", 0xa6, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x18, @local, 0x7}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 119.961228ms ago: executing program 0 (id=11): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@bh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYRES8=r0], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) write$P9_RREAD(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 12.43148ms ago: executing program 2 (id=3): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socket$inet6(0xa, 0x2, 0x3a) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 0s ago: executing program 3 (id=12): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x28}}], 0x1, 0x4001c00) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r4, 0x0, 0xfffffffffffffffe}, 0x10) r5 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500)=0xffffefdfbffffff8, 0xef9) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7fff}, 0x0, 0x2, 0x2}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 51.222446][ T4240] cgroup: Unknown subsys name 'net' [ 51.347594][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.557396][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.440445][ T4253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.448380][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.458199][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.465895][ T4257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.473948][ T4257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.481709][ T4257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.490387][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.492690][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.498464][ T4257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.505333][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.512323][ T4257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.519982][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.533244][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.533381][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.540700][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.548681][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.556292][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.561877][ T4257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.569085][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.576025][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.583906][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.589655][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.596725][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.603532][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.610560][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.617333][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.624630][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.631027][ T4257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.638429][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.652091][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.107710][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 55.120952][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 55.179588][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 55.210133][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 55.232265][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.239533][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.248714][ T4260] device bridge_slave_0 entered promiscuous mode [ 55.260667][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.267819][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.275538][ T4260] device bridge_slave_1 entered promiscuous mode [ 55.304843][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 55.349975][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.366487][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.373750][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.381314][ T4263] device bridge_slave_0 entered promiscuous mode [ 55.389703][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.397022][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.405190][ T4263] device bridge_slave_1 entered promiscuous mode [ 55.420475][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.494233][ T4260] team0: Port device team_slave_0 added [ 55.502206][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.509601][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.517743][ T4250] device bridge_slave_0 entered promiscuous mode [ 55.526549][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.538753][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.546054][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.554353][ T4258] device bridge_slave_0 entered promiscuous mode [ 55.567452][ T4260] team0: Port device team_slave_1 added [ 55.574046][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.581114][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.588946][ T4250] device bridge_slave_1 entered promiscuous mode [ 55.597660][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.616542][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.623770][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.631465][ T4258] device bridge_slave_1 entered promiscuous mode [ 55.676870][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.684061][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.693252][ T4254] device bridge_slave_0 entered promiscuous mode [ 55.713225][ T4263] team0: Port device team_slave_0 added [ 55.720435][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.738885][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.746201][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.754583][ T4254] device bridge_slave_1 entered promiscuous mode [ 55.762054][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.769047][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.795352][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.807973][ T4263] team0: Port device team_slave_1 added [ 55.815672][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.826081][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.848907][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.855952][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.881892][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.905348][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.958916][ T4250] team0: Port device team_slave_0 added [ 55.966402][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.983866][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.990843][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.017467][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.030934][ T4258] team0: Port device team_slave_0 added [ 56.038239][ T4250] team0: Port device team_slave_1 added [ 56.046150][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.059087][ T4260] device hsr_slave_0 entered promiscuous mode [ 56.065886][ T4260] device hsr_slave_1 entered promiscuous mode [ 56.083547][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.090500][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.116895][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.128934][ T4258] team0: Port device team_slave_1 added [ 56.160480][ T4254] team0: Port device team_slave_0 added [ 56.199803][ T4254] team0: Port device team_slave_1 added [ 56.211514][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.218902][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.244982][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.286324][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.293462][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.319830][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.331602][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.338883][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.365041][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.382075][ T4263] device hsr_slave_0 entered promiscuous mode [ 56.389362][ T4263] device hsr_slave_1 entered promiscuous mode [ 56.396038][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.404216][ T4263] Cannot create hsr debugfs directory [ 56.410128][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.417287][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.443394][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.455481][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.462431][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.488580][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.507469][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.514482][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.541329][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.615578][ T4250] device hsr_slave_0 entered promiscuous mode [ 56.622180][ T4250] device hsr_slave_1 entered promiscuous mode [ 56.628918][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.636689][ T4250] Cannot create hsr debugfs directory [ 56.648933][ T4258] device hsr_slave_0 entered promiscuous mode [ 56.655741][ T4258] device hsr_slave_1 entered promiscuous mode [ 56.662132][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.669819][ T4258] Cannot create hsr debugfs directory [ 56.710045][ T4254] device hsr_slave_0 entered promiscuous mode [ 56.716995][ T4254] device hsr_slave_1 entered promiscuous mode [ 56.723797][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.731347][ T4254] Cannot create hsr debugfs directory [ 56.743773][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 56.750632][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 56.750646][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 56.750802][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 56.756834][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 57.021312][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.041876][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.056014][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.065442][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.097568][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.111161][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.129913][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.138807][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.205288][ T4258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.244006][ T4258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.268704][ T4258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.281710][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.292585][ T4258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.309439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.319056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.336409][ T4263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.366348][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.373905][ T4263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.401058][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.408161][ T4263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.417614][ T4263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.426163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.438282][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.447512][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.454825][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.464585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.481913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.490736][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.500960][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.508354][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.525530][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.535937][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.558326][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.576038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.586050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.594041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.618182][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.627806][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.650707][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.659936][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.670350][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.680457][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.691141][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.699930][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.707009][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.715316][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.725477][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.736459][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.743569][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.751218][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.761418][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.770083][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.778796][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.787285][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.796312][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.804826][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.841772][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.853605][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.867658][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.879735][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.888908][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.901226][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.909881][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.918433][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.926975][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.935413][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.972230][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.988190][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.008135][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.021074][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.063186][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.071914][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.098452][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.109159][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.148513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.163949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.188117][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.200280][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.209447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.227701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.260103][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.285365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.301984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.316336][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.323547][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.339816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.349428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.359024][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.366146][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.376798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.384831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.398655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.408093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.419631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.428906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.438257][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.445414][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.469506][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.500809][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.509080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.526190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.535419][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.542548][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.550421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.559685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.569311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.578382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.591386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.600117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.609786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.618480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.627408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.651497][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.660750][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.670088][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.677219][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.685897][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.695286][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.703957][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.712430][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.721187][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.728283][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.736222][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.745543][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.757083][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.765304][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.773409][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.781895][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.798757][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.807840][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.823363][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 58.824055][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 58.829390][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 58.836438][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 58.842325][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 58.857254][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.867981][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.880030][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.888613][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.918730][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.936529][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.946499][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.956259][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.965561][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.974347][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.984544][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.993349][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.000747][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.008519][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.017453][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.030286][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.038708][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.047234][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.056101][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.064621][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.087691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.096173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.111745][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.124438][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.142543][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.163770][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.186585][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.228471][ T4260] device veth0_vlan entered promiscuous mode [ 59.246812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.263896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.284747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.303852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.321434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.329450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.342514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.350621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.379074][ T4250] device veth0_vlan entered promiscuous mode [ 59.406897][ T4260] device veth1_vlan entered promiscuous mode [ 59.436588][ T4250] device veth1_vlan entered promiscuous mode [ 59.495787][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.513688][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.530097][ T4260] device veth0_macvtap entered promiscuous mode [ 59.546085][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.559380][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.570107][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.597512][ T4250] device veth0_macvtap entered promiscuous mode [ 59.620065][ T4260] device veth1_macvtap entered promiscuous mode [ 59.637198][ T4250] device veth1_macvtap entered promiscuous mode [ 59.648415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.662168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.670992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.679454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.686938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.704746][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.723540][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.741967][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.751988][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.761400][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.771653][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.797470][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.810429][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.825657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.838605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.848949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.861322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.880633][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.892016][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.904186][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.914964][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.925878][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.936839][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.955669][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.964802][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.974821][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.983756][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.000877][ T4263] device veth0_vlan entered promiscuous mode [ 60.009149][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.017837][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.029203][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.039182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.048133][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.055994][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.063622][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.071748][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.080643][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.088734][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.107212][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.114719][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.127434][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.156134][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.168657][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.178616][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.198341][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.219640][ T4263] device veth1_vlan entered promiscuous mode [ 60.258399][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.269992][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.326965][ T4258] device veth0_vlan entered promiscuous mode [ 60.336369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.357025][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.369980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.379884][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.394963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.406869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.436753][ T4263] device veth0_macvtap entered promiscuous mode [ 60.474115][ T4258] device veth1_vlan entered promiscuous mode [ 60.488807][ T4263] device veth1_macvtap entered promiscuous mode [ 60.545553][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.563944][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.574428][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.587340][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.605788][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.631829][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.639877][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.641576][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.648883][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.664400][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.672371][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.681206][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.691015][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.700173][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.717881][ T4258] device veth0_macvtap entered promiscuous mode [ 60.727187][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.739047][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.750858][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.761421][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.773239][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.784155][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.793408][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.802021][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.811025][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.826205][ T4258] device veth1_macvtap entered promiscuous mode [ 60.836215][ T4263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.845985][ T4263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.855371][ T4263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.864785][ T4263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.903460][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 60.903559][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 60.909508][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 60.915606][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 60.921479][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 60.935394][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.944471][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.953204][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.962381][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.978853][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.990189][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.003726][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.014452][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.024565][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.035245][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.046666][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.062070][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.073330][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.085147][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.095633][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.105484][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.116141][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.127261][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.144621][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.153818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.162518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.172734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.182050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.190905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.199357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.207604][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.222149][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.224956][ T4258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.240291][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.244069][ T4258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.252820][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.264391][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.269493][ T4258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.282951][ T4258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.298679][ T4254] device veth0_vlan entered promiscuous mode [ 61.314882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.325659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.355114][ T4254] device veth1_vlan entered promiscuous mode [ 61.393937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.401890][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.426101][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.496027][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.535251][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.575286][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.583657][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.593295][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.704028][ T4254] device veth0_macvtap entered promiscuous mode [ 62.689835][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.754097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.764961][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.819178][ T4254] device veth1_macvtap entered promiscuous mode [ 62.828518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.843356][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.852418][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.871874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.881896][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.891907][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.910861][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.018488][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 63.024590][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 63.030628][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 63.037166][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 63.043278][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 64.211840][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.231633][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.708415][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.719212][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.729278][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.741550][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.753134][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.764851][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.777420][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.787965][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.797535][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.808149][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.820414][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.851517][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.886132][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.072862][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.094349][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.105729][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.116289][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.186846][ T4392] Can't find a SQUASHFS superblock on nullb0 [ 65.579905][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.680061][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.694821][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.872156][ T4399] loop0: detected capacity change from 0 to 512 [ 65.887961][ T4399] EXT4-fs: Ignoring removed bh option [ 65.898998][ T4399] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.924946][ T4399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.927757][ T4400] ================================================================== [ 65.942839][ T4400] BUG: KASAN: use-after-free in kfree_skb_reason+0x3c/0x370 [ 65.950156][ T4400] Read of size 4 at addr ffff88801cf2cea4 by task syz.1.2/4400 [ 65.957704][ T4400] [ 65.960048][ T4400] CPU: 0 PID: 4400 Comm: syz.1.2 Not tainted 6.1.142-syzkaller #0 [ 65.967860][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.977932][ T4400] Call Trace: [ 65.981215][ T4400] [ 65.984151][ T4400] dump_stack_lvl+0x168/0x22e [ 65.988842][ T4400] ? __lock_acquire+0x7c50/0x7c50 [ 65.993880][ T4400] ? show_regs_print_info+0x12/0x12 [ 65.999092][ T4400] ? load_image+0x3b0/0x3b0 [ 66.003606][ T4400] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 66.008995][ T4400] ? __virt_addr_valid+0x188/0x540 [ 66.014115][ T4400] ? __virt_addr_valid+0x465/0x540 [ 66.019223][ T4400] ? kfree_skb_reason+0x3c/0x370 [ 66.024159][ T4400] print_report+0xa8/0x220 [ 66.028578][ T4400] kasan_report+0x10b/0x140 [ 66.033082][ T4400] ? kfree_skb_reason+0x3c/0x370 [ 66.038017][ T4400] kasan_check_range+0x27b/0x290 [ 66.042951][ T4400] kfree_skb_reason+0x3c/0x370 [ 66.047723][ T4400] nr_transmit_buffer+0x112/0x1a0 [ 66.052751][ T4400] nr_establish_data_link+0x5e/0xb0 [ 66.057949][ T4400] nr_connect+0x6e2/0xde0 [ 66.062273][ T4400] ? nr_bind+0x590/0x590 [ 66.066504][ T4400] ? tomoyo_socket_connect_permission+0x195/0x280 [ 66.072919][ T4400] ? __might_fault+0xa6/0x120 [ 66.077589][ T4400] ? bpf_lsm_socket_connect+0x5/0x10 [ 66.082870][ T4400] ? security_socket_connect+0x7c/0xa0 [ 66.088328][ T4400] ? nr_bind+0x590/0x590 [ 66.092570][ T4400] __sys_connect+0x389/0x410 [ 66.097156][ T4400] ? __sys_connect_file+0x170/0x170 [ 66.102363][ T4400] __x64_sys_connect+0x76/0x80 [ 66.107120][ T4400] do_syscall_64+0x4c/0xa0 [ 66.111526][ T4400] ? clear_bhb_loop+0x60/0xb0 [ 66.116189][ T4400] ? clear_bhb_loop+0x60/0xb0 [ 66.120850][ T4400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.126733][ T4400] RIP: 0033:0x7f062158e929 [ 66.131141][ T4400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.150746][ T4400] RSP: 002b:00007f0622467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 66.159164][ T4400] RAX: ffffffffffffffda RBX: 00007f06217b6080 RCX: 00007f062158e929 [ 66.167131][ T4400] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000006 [ 66.175091][ T4400] RBP: 00007f0621610b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.183057][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.191017][ T4400] R13: 0000000000000000 R14: 00007f06217b6080 R15: 00007fff15941538 [ 66.198986][ T4400] [ 66.201994][ T4400] [ 66.204299][ T4400] Allocated by task 4400: [ 66.208609][ T4400] kasan_set_track+0x4b/0x70 [ 66.213208][ T4400] __kasan_slab_alloc+0x6b/0x80 [ 66.218048][ T4400] slab_post_alloc_hook+0x4b/0x480 [ 66.223142][ T4400] kmem_cache_alloc_node+0x14d/0x320 [ 66.228409][ T4400] __alloc_skb+0xfc/0x7e0 [ 66.232725][ T4400] nr_write_internal+0xca/0xcb0 [ 66.237578][ T4400] nr_establish_data_link+0x5e/0xb0 [ 66.242766][ T4400] nr_connect+0x6e2/0xde0 [ 66.247089][ T4400] __sys_connect+0x389/0x410 [ 66.251665][ T4400] __x64_sys_connect+0x76/0x80 [ 66.256417][ T4400] do_syscall_64+0x4c/0xa0 [ 66.260822][ T4400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.266705][ T4400] [ 66.269010][ T4400] Freed by task 4400: [ 66.272970][ T4400] kasan_set_track+0x4b/0x70 [ 66.277550][ T4400] kasan_save_free_info+0x2d/0x50 [ 66.282555][ T4400] ____kasan_slab_free+0x126/0x1e0 [ 66.287658][ T4400] slab_free_freelist_hook+0x131/0x1a0 [ 66.293101][ T4400] kmem_cache_free+0xf7/0x290 [ 66.297761][ T4400] nr_route_frame+0x45e/0x7d0 [ 66.302422][ T4400] nr_transmit_buffer+0xe3/0x1a0 [ 66.307343][ T4400] nr_establish_data_link+0x5e/0xb0 [ 66.312525][ T4400] nr_connect+0x6e2/0xde0 [ 66.316841][ T4400] __sys_connect+0x389/0x410 [ 66.321414][ T4400] __x64_sys_connect+0x76/0x80 [ 66.326162][ T4400] do_syscall_64+0x4c/0xa0 [ 66.330565][ T4400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.336449][ T4400] [ 66.338757][ T4400] The buggy address belongs to the object at ffff88801cf2cdc0 [ 66.338757][ T4400] which belongs to the cache skbuff_head_cache of size 240 [ 66.353312][ T4400] The buggy address is located 228 bytes inside of [ 66.353312][ T4400] 240-byte region [ffff88801cf2cdc0, ffff88801cf2ceb0) [ 66.366564][ T4400] [ 66.368872][ T4400] The buggy address belongs to the physical page: [ 66.375273][ T4400] page:ffffea000073cb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cf2c [ 66.385405][ T4400] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 66.392946][ T4400] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888141a59000 [ 66.401513][ T4400] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 66.410075][ T4400] page dumped because: kasan: bad access detected [ 66.416473][ T4400] page_owner tracks the page as allocated [ 66.422167][ T4400] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:1), ts 65914207720, free_ts 65883549425 [ 66.441507][ T4400] post_alloc_hook+0x173/0x1a0 [ 66.446262][ T4400] get_page_from_freelist+0x1a26/0x1ac0 [ 66.451787][ T4400] __alloc_pages+0x1df/0x4e0 [ 66.456357][ T4400] alloc_slab_page+0x5d/0x160 [ 66.461017][ T4400] new_slab+0x87/0x2c0 [ 66.465072][ T4400] ___slab_alloc+0xbc6/0x1220 [ 66.469730][ T4400] kmem_cache_alloc_node+0x1e5/0x320 [ 66.474997][ T4400] __alloc_skb+0xfc/0x7e0 [ 66.479311][ T4400] nsim_dev_trap_report_work+0x28f/0xaf0 [ 66.484925][ T4400] process_one_work+0x898/0x1160 [ 66.489843][ T4400] worker_thread+0xaa2/0x1250 [ 66.494504][ T4400] kthread+0x29d/0x330 [ 66.498557][ T4400] ret_from_fork+0x1f/0x30 [ 66.502959][ T4400] page last free stack trace: [ 66.507608][ T4400] free_unref_page_prepare+0x8b4/0x9a0 [ 66.513058][ T4400] free_unref_page+0x2e/0x3f0 [ 66.517722][ T4400] __unfreeze_partials+0x1a5/0x200 [ 66.522819][ T4400] put_cpu_partial+0x17c/0x250 [ 66.527565][ T4400] qlist_free_all+0x76/0xe0 [ 66.532063][ T4400] kasan_quarantine_reduce+0x144/0x160 [ 66.537520][ T4400] __kasan_slab_alloc+0x1e/0x80 [ 66.542368][ T4400] slab_post_alloc_hook+0x4b/0x480 [ 66.547470][ T4400] kmem_cache_alloc_node+0x14d/0x320 [ 66.552742][ T4400] __alloc_skb+0xfc/0x7e0 [ 66.557064][ T4400] alloc_skb_with_frags+0xa7/0x710 [ 66.562162][ T4400] sock_alloc_send_pskb+0x853/0x980 [ 66.567348][ T4400] unix_dgram_sendmsg+0x592/0x16c0 [ 66.572443][ T4400] __sys_sendto+0x44f/0x5c0 [ 66.576932][ T4400] __x64_sys_sendto+0xda/0xf0 [ 66.581596][ T4400] do_syscall_64+0x4c/0xa0 [ 66.585997][ T4400] [ 66.588304][ T4400] Memory state around the buggy address: [ 66.593912][ T4400] ffff88801cf2cd80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 66.601960][ T4400] ffff88801cf2ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.610003][ T4400] >ffff88801cf2ce80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 66.618041][ T4400] ^ [ 66.623128][ T4400] ffff88801cf2cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.631168][ T4400] ffff88801cf2cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.639206][ T4400] ================================================================== [ 66.647258][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.711957][ T4399] EXT4-fs (loop0): 1 truncate cleaned up [ 66.722347][ T4399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.802953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.823417][ T27] audit: type=1326 audit(1751336405.414:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb233b8e929 code=0x7ffc0000 [ 66.862540][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 67.110794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.212916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.315633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.883433][ T4400] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.890658][ T4400] CPU: 0 PID: 4400 Comm: syz.1.2 Not tainted 6.1.142-syzkaller #0 [ 68.893388][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.893416][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.893437][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.893459][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.933007][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.943051][ T4400] Call Trace: [ 68.946325][ T4400] [ 68.949241][ T4400] dump_stack_lvl+0x168/0x22e [ 68.953912][ T4400] ? memcpy+0x3c/0x60 [ 68.957878][ T4400] ? show_regs_print_info+0x12/0x12 [ 68.963067][ T4400] ? load_image+0x3b0/0x3b0 [ 68.967582][ T4400] panic+0x2c9/0x710 [ 68.971476][ T4400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.977625][ T4400] ? bpf_jit_dump+0xd0/0xd0 [ 68.982124][ T4400] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 68.988013][ T4400] ? _raw_spin_unlock+0x40/0x40 [ 68.992853][ T4400] check_panic_on_warn+0x80/0xa0 [ 68.997779][ T4400] ? kfree_skb_reason+0x3c/0x370 [ 69.002710][ T4400] end_report+0x66/0x110 [ 69.006940][ T4400] kasan_report+0x118/0x140 [ 69.011431][ T4400] ? kfree_skb_reason+0x3c/0x370 [ 69.016355][ T4400] kasan_check_range+0x27b/0x290 [ 69.021279][ T4400] kfree_skb_reason+0x3c/0x370 [ 69.026031][ T4400] nr_transmit_buffer+0x112/0x1a0 [ 69.031045][ T4400] nr_establish_data_link+0x5e/0xb0 [ 69.036232][ T4400] nr_connect+0x6e2/0xde0 [ 69.040550][ T4400] ? nr_bind+0x590/0x590 [ 69.044788][ T4400] ? tomoyo_socket_connect_permission+0x195/0x280 [ 69.051194][ T4400] ? __might_fault+0xa6/0x120 [ 69.055859][ T4400] ? bpf_lsm_socket_connect+0x5/0x10 [ 69.061129][ T4400] ? security_socket_connect+0x7c/0xa0 [ 69.066568][ T4400] ? nr_bind+0x590/0x590 [ 69.070800][ T4400] __sys_connect+0x389/0x410 [ 69.075382][ T4400] ? __sys_connect_file+0x170/0x170 [ 69.080571][ T4400] __x64_sys_connect+0x76/0x80 [ 69.085321][ T4400] do_syscall_64+0x4c/0xa0 [ 69.089723][ T4400] ? clear_bhb_loop+0x60/0xb0 [ 69.094387][ T4400] ? clear_bhb_loop+0x60/0xb0 [ 69.099048][ T4400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.104931][ T4400] RIP: 0033:0x7f062158e929 [ 69.109331][ T4400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.128921][ T4400] RSP: 002b:00007f0622467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 69.137318][ T4400] RAX: ffffffffffffffda RBX: 00007f06217b6080 RCX: 00007f062158e929 [ 69.145271][ T4400] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000006 [ 69.153225][ T4400] RBP: 00007f0621610b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.161180][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.169132][ T4400] R13: 0000000000000000 R14: 00007f06217b6080 R15: 00007fff15941538 [ 69.177089][ T4400] [ 69.180305][ T4400] Kernel Offset: disabled [ 69.184614][ T4400] Rebooting in 86400 seconds..