last executing test programs: 54.069550572s ago: executing program 0 (id=598): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.837002956s ago: executing program 0 (id=599): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x10000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003040)="c2", 0x1}], 0x1}}], 0x1, 0x4000000) 52.734940023s ago: executing program 0 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 52.149178001s ago: executing program 0 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 51.961695035s ago: executing program 0 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 50.034639524s ago: executing program 0 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 50.034379804s ago: executing program 32 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 49.01570544s ago: executing program 2 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) 46.924877473s ago: executing program 2 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 45.766141231s ago: executing program 2 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000bc0)="d3", 0x1}], 0x1}}], 0x2, 0x2000000) 45.599933323s ago: executing program 2 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 45.107683051s ago: executing program 2 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001500)={0x3, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 40.923802116s ago: executing program 2 (id=642): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48c5) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 40.125498358s ago: executing program 33 (id=642): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48c5) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 22.083707508s ago: executing program 4 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 21.017374094s ago: executing program 4 (id=678): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "50420e4925d5834746afa7eeb4dd907847b05524aab4f9a4c19bcdd4eff28625", "a8e747cb5dc2b8651b4f7e29228c9c7c936db1f0ce53934be162493a394dea07", "0cdf12801d2f39ccc10e342f2a1d2a607ba3d0e2997b3d4e7255e400", "bcdd03fe2d5881cd2e7b7effd84dcf847d4731c603841f9312c0c7c2aa92b990", "5ac2d3c42f9c4f13b1a2719e8c40656a197362bf7c3f5e02e1ab80479ab1d83d", "e11c3cf269419534099ca78f", 0x8, 0x3, 0x9, 0x100000, 0x3}}) 16.654656112s ago: executing program 4 (id=687): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.368691686s ago: executing program 4 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="019f07"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 15.249141834s ago: executing program 4 (id=692): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.321010399s ago: executing program 1 (id=699): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x101, 0xc, {0x5, 0x4, 0x8, 0x8000}}) 12.186717751s ago: executing program 1 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 9.746145449s ago: executing program 5 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) 6.410260251s ago: executing program 5 (id=704): r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r5 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x4, 0x1, 0x34343459, 0x3, 0x8, [{0x3, 0x1}, {0x54, 0x5}, {0x8}, {0x2, 0xff}, {0x9, 0x4000005}, {0x6, 0x10001}, {0x3, 0x400}, {0xb3, 0x3000000}], 0xf, 0x3, 0x3, 0x1, 0x7}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0xdd) 6.410038271s ago: executing program 4 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001500)={0x3, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 6.348725692s ago: executing program 1 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4}, 0x50) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xf7ae}, 0x50) shutdown(0xffffffffffffffff, 0x0) 5.435053996s ago: executing program 1 (id=708): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.692066237s ago: executing program 1 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000020c0)={r1, 0x3ff}, &(0x7f0000002100)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x417, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x232}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x693b, 0x217, 0x2, 0x0, 0x0) dup3(r7, r5, 0x80000) r10 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.689511627s ago: executing program 5 (id=712): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.796331231s ago: executing program 3 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) 3.385989468s ago: executing program 3 (id=714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) gettid() syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 3.288274149s ago: executing program 5 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 2.198638986s ago: executing program 3 (id=716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x64, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000004}, 0x40001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x281, 0x2, 0x23}, 0x18) open_tree(r2, &(0x7f00000003c0)='./file0\x00', 0x1) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r1, 0x301, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) connect$unix(r5, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.198318576s ago: executing program 6 (id=644): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0xdd0f76e88c10240e, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.983528239s ago: executing program 1 (id=717): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xc, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 1.246257121s ago: executing program 34 (id=717): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xc, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 1.186035242s ago: executing program 5 (id=718): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r0, 0x2, ']\x00'}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.155051392s ago: executing program 3 (id=719): r0 = syz_open_dev$video4linux(0x0, 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) 1.112789563s ago: executing program 6 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 271.841686ms ago: executing program 3 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000ec00f5849557a4717ea4acf19dce559daaefed76ec9b85097fa8c870ae17", @ANYRES16=r1, @ANYRESHEX=r0], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 130.251468ms ago: executing program 5 (id=722): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 38.621057][ T4297] cgroup: Unknown subsys name 'net' [ 38.871411][ T4297] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.278242][ T4297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 40.458248][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.461152][ T4314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.464525][ T4316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.467447][ T4316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.470746][ T4316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.474074][ T4314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.476367][ T4314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.478861][ T4314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.483300][ T4322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.485732][ T4322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.489002][ T4322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.489557][ T4318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.491702][ T4322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.494278][ T4318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.495257][ T4322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.497858][ T4318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.500516][ T4322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.501630][ T4318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.503253][ T4322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.505094][ T4318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 40.507235][ T4322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.508645][ T4318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.511497][ T4323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.514465][ T4323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.515160][ T4318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.518383][ T4323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.519556][ T4323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.521806][ T4318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.522965][ T4323] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 40.528730][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.794773][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 40.849267][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 40.855246][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 40.876108][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 40.930349][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.932454][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.935068][ T4312] device bridge_slave_0 entered promiscuous mode [ 40.955834][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.957941][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.960639][ T4312] device bridge_slave_1 entered promiscuous mode [ 41.014113][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.016088][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.018828][ T4320] device bridge_slave_0 entered promiscuous mode [ 41.022605][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.024650][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.027653][ T4320] device bridge_slave_1 entered promiscuous mode [ 41.030566][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.032611][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.035318][ T4308] device bridge_slave_0 entered promiscuous mode [ 41.045615][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.048534][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.050580][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.053161][ T4307] device bridge_slave_0 entered promiscuous mode [ 41.067491][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.069403][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.072066][ T4308] device bridge_slave_1 entered promiscuous mode [ 41.084787][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.092334][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.094261][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.101177][ T4307] device bridge_slave_1 entered promiscuous mode [ 41.111490][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.120787][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.128124][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 41.133540][ T4312] team0: Port device team_slave_0 added [ 41.138747][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.148597][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.164780][ T4312] team0: Port device team_slave_1 added [ 41.173150][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.190105][ T4308] team0: Port device team_slave_0 added [ 41.204941][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.211790][ T4320] team0: Port device team_slave_0 added [ 41.214827][ T4308] team0: Port device team_slave_1 added [ 41.230049][ T4320] team0: Port device team_slave_1 added [ 41.242363][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.244294][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.251949][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.269183][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.271241][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.273712][ T4317] device bridge_slave_0 entered promiscuous mode [ 41.277336][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.279264][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.281840][ T4317] device bridge_slave_1 entered promiscuous mode [ 41.284527][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.286668][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.293682][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.311119][ T4307] team0: Port device team_slave_0 added [ 41.318778][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.320668][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.327844][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.343830][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.345776][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.353018][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.357453][ T4307] team0: Port device team_slave_1 added [ 41.359470][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.361372][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.368578][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.388340][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.392763][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.396052][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.403156][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.410677][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.423711][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.425638][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.433158][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.449755][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.451728][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.459138][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.470307][ T4317] team0: Port device team_slave_0 added [ 41.473429][ T4317] team0: Port device team_slave_1 added [ 41.558447][ T4312] device hsr_slave_0 entered promiscuous mode [ 41.596623][ T4312] device hsr_slave_1 entered promiscuous mode [ 41.646834][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.648771][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.655771][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.660582][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.662495][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.669619][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.728006][ T4320] device hsr_slave_0 entered promiscuous mode [ 41.786711][ T4320] device hsr_slave_1 entered promiscuous mode [ 41.836573][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.838796][ T4320] Cannot create hsr debugfs directory [ 41.878250][ T4308] device hsr_slave_0 entered promiscuous mode [ 41.916649][ T4308] device hsr_slave_1 entered promiscuous mode [ 41.956421][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.958612][ T4308] Cannot create hsr debugfs directory [ 42.058048][ T4307] device hsr_slave_0 entered promiscuous mode [ 42.106748][ T4307] device hsr_slave_1 entered promiscuous mode [ 42.146545][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.148608][ T4307] Cannot create hsr debugfs directory [ 42.228028][ T4317] device hsr_slave_0 entered promiscuous mode [ 42.286649][ T4317] device hsr_slave_1 entered promiscuous mode [ 42.326423][ T4317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.328530][ T4317] Cannot create hsr debugfs directory [ 42.526510][ T4312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.579969][ T4312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.586634][ T4314] Bluetooth: hci1: command 0x0409 tx timeout [ 42.588390][ T4314] Bluetooth: hci2: command 0x0409 tx timeout [ 42.590165][ T4314] Bluetooth: hci3: command 0x0409 tx timeout [ 42.596437][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 42.596643][ T4314] Bluetooth: hci0: command 0x0409 tx timeout [ 42.618407][ T4312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.669054][ T4312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.737561][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.790212][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.847259][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.909026][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.979441][ T4308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.030403][ T4308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.067823][ T4308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.128252][ T4308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.269095][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.318529][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.355386][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.419611][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.424989][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.534523][ T4317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.558962][ T4317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.604674][ T4317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.650744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.654667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.661397][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.665234][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.672600][ T4317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.715914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.718914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.723246][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.726030][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.729293][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.731337][ T1758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.742977][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.746344][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.751101][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.754486][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.761235][ T1758] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.763298][ T1758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.789512][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.801507][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.803542][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.807161][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.809912][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.811820][ T1758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.814537][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.824863][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.828311][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.830860][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.847427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.850232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.852772][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.854809][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.858389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.861164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.863679][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.865605][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.869175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.871807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.874336][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.876371][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.879677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.887333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.889853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.892680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.898411][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.911545][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.914779][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.922334][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.938251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.941713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.944488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.947871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.950547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.953624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.962197][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.972752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.976188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.989166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.992022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.995077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.003541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.015412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.020171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.022805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.025649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.028708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.031181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.033615][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.036309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.040267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.052032][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.055380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.058392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.061049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.064033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.070168][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.075620][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.085906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.089679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.096003][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.109483][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.112530][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.115300][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.117305][ T1758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.121270][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.124080][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.132382][ T1758] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.134339][ T1758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.147369][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.150004][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.183537][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.187789][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.191382][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.197595][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.230172][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.232977][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.240914][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.243805][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.247384][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.256850][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.260664][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.272378][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.278323][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.286932][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.317665][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.320166][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.341523][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.360157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.362952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.365472][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.367596][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.401896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.405284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.408930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.414327][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.416698][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.420923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.445503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.450430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.453842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.457469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.473487][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.475761][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.478391][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.480639][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.482790][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.485689][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.498222][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.514783][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.521774][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.523850][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.526090][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.529827][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.547183][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.549930][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.556801][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.561373][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.575368][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.579765][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.599295][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.601518][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.603667][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.612653][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.635452][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.639213][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.642840][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.645625][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.657103][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.667380][ T4314] Bluetooth: hci0: command 0x041b tx timeout [ 44.669102][ T4314] Bluetooth: hci4: command 0x041b tx timeout [ 44.670826][ T4314] Bluetooth: hci2: command 0x041b tx timeout [ 44.672422][ T4314] Bluetooth: hci3: command 0x041b tx timeout [ 44.673026][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 44.684139][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.687944][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.693707][ T4312] device veth0_vlan entered promiscuous mode [ 44.710246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.712985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.715899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.724869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.729551][ T4308] device veth0_vlan entered promiscuous mode [ 44.735956][ T4320] device veth0_vlan entered promiscuous mode [ 44.749562][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.752407][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.759529][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.762230][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.769086][ T4312] device veth1_vlan entered promiscuous mode [ 44.772184][ T4308] device veth1_vlan entered promiscuous mode [ 44.784986][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.788207][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.790841][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.793447][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.798632][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.801382][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.803545][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.825442][ T4320] device veth1_vlan entered promiscuous mode [ 44.851704][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.854484][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.862933][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.865642][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.869707][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.890883][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.893536][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.898140][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.901523][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.903964][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.908420][ T4307] device veth0_vlan entered promiscuous mode [ 44.914096][ T4307] device veth1_vlan entered promiscuous mode [ 44.924529][ T4308] device veth0_macvtap entered promiscuous mode [ 44.931057][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.933682][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.937455][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.941449][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.949328][ T4308] device veth1_macvtap entered promiscuous mode [ 44.962231][ T4312] device veth0_macvtap entered promiscuous mode [ 44.983791][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.994667][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.998131][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.000826][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.003668][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.008614][ T4320] device veth0_macvtap entered promiscuous mode [ 45.015865][ T4312] device veth1_macvtap entered promiscuous mode [ 45.024631][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.031095][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.033519][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.036803][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.039439][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.042249][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.045101][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.049865][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.055023][ T4320] device veth1_macvtap entered promiscuous mode [ 45.072531][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.075156][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.078262][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.081046][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.084672][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.103987][ T4308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.107582][ T4308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.109960][ T4308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.112291][ T4308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.122219][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.124993][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.134095][ T4307] device veth0_macvtap entered promiscuous mode [ 45.138877][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.141541][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.144058][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.152698][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.155783][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.161433][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.163808][ T4317] device veth0_vlan entered promiscuous mode [ 45.171935][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.174733][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.182965][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.185696][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.190566][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.193294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.196101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.199969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.202792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.209514][ T4307] device veth1_macvtap entered promiscuous mode [ 45.219489][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.222310][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.226118][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.234346][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.238099][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.240708][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.243364][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.247592][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.251528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.254277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.258095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.260771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.265688][ T4312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.268767][ T4312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.271160][ T4312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.273403][ T4312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.282422][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.284813][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.287994][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.290339][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.297133][ T4317] device veth1_vlan entered promiscuous mode [ 45.319327][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.322130][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.324759][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.328907][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.331501][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.334248][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.338918][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.360051][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.362804][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.418050][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.420894][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.423960][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.427529][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.430055][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.432726][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.437695][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.447525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.450436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.465167][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.468843][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.471997][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.474409][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.503834][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.506533][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.524687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.532916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.541747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.545391][ T4317] device veth0_macvtap entered promiscuous mode [ 45.551542][ T4317] device veth1_macvtap entered promiscuous mode [ 45.580316][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.582614][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.583700][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.589953][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.592634][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.595486][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.599423][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.602148][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.604784][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.609001][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.612911][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.615105][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.617790][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.620284][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.624870][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.632156][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.652200][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.655053][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.662444][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.665236][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.669065][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.671778][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.674538][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.677697][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.681693][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.692080][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.695112][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.709165][ T4317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.711486][ T4317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.713853][ T4317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.716147][ T4317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.737529][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.738563][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.739819][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.741073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.742600][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.752633][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.806840][ T1758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.809220][ T1758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.835092][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.859198][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.861515][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.864542][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.931152][ T1700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.933465][ T1700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.125785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.156600][ T1700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.159094][ T1700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.658928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.672815][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.675666][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.694680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.747882][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 46.750700][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 46.750741][ T4314] Bluetooth: hci2: command 0x040f tx timeout [ 46.752831][ T4318] Bluetooth: hci4: command 0x040f tx timeout [ 46.754499][ T4314] Bluetooth: hci0: command 0x040f tx timeout [ 46.880842][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.883185][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.021886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.291039][ T4316] Bluetooth: hci3: command 0x0419 tx timeout [ 49.292912][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 49.294789][ T4316] Bluetooth: hci2: command 0x0419 tx timeout [ 49.296722][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 49.329243][ T4446] block device autoloading is deprecated and will be removed. [ 49.393154][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 49.457475][ T4439] Zero length message leads to an empty skb [ 50.277158][ T4469] atomic_op 000000007c5619fa conn xmit_atomic 0000000000000000 [ 50.798422][ T4465] binder: 4463:4465 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 51.138373][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.141493][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.260420][ T4476] device ip6erspan0 entered promiscuous mode [ 51.284504][ T4476] tipc: Started in network mode [ 51.286113][ T4476] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 52.294372][ T4482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.298684][ T4482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.036274][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.069760][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.133409][ T4494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14'. [ 54.853106][ T4501] NILFS (nullb0): couldn't find nilfs on the device [ 55.098906][ T4503] netlink: 'syz.1.17': attribute type 21 has an invalid length. [ 56.149658][ T4508] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 57.817907][ T4514] Cannot find add_set index 0 as target [ 59.284539][ T4508] team0: Device ipvlan1 failed to register rx_handler [ 63.374413][ T4542] Cannot find add_set index 0 as target [ 64.660865][ T4539] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.26'. [ 64.664152][ T4537] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.26'. [ 64.853740][ T4550] netlink: 'syz.1.31': attribute type 2 has an invalid length. [ 64.856046][ T4550] netlink: 244 bytes leftover after parsing attributes in process `syz.1.31'. [ 65.134651][ T4553] xt_hashlimit: max too large, truncated to 1048576 [ 66.251778][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 67.538399][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.553391][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.846676][ T4594] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 69.849077][ T4594] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 70.066353][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.072496][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.129290][ T1515] cfg80211: failed to load regulatory.db [ 72.329155][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.333406][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.671883][ T4613] Cannot find add_set index 0 as target [ 73.888741][ T4621] tipc: Started in network mode [ 73.890158][ T4621] tipc: Node identity 6affa0a8b67f, cluster identity 4711 [ 73.892191][ T4621] tipc: Enabled bearer , priority 0 [ 73.908343][ T4621] device syzkaller0 entered promiscuous mode [ 73.992762][ T4627] ubi31: attaching mtd0 [ 74.001464][ T4627] ubi31: scanning is finished [ 74.002876][ T4627] ubi31: empty MTD device detected [ 74.546417][ T4627] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 74.659488][ T4618] tipc: Resetting bearer [ 74.665123][ T4630] binder: 4626:4630 got transaction to invalid handle, 1 [ 74.707116][ T4630] binder: 4630:4626 cannot find target node [ 74.708903][ T4630] binder: 4626:4630 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3054 [ 74.747295][ T4630] binder: 4626:4630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.750926][ T4630] binder: 4630 RLIMIT_NICE not set [ 74.752327][ T4630] binder: 4626:4630 ioctl c0306201 20000240 returned -11 [ 74.953612][ T4618] tipc: Disabling bearer [ 75.057006][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.207432][ T22] tipc: Node number set to 3699417256 [ 75.496432][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.112332][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 76.334729][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 76.413486][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 76.417651][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 76.419972][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.422740][ T47] Workqueue: hci1 hci_rx_work [ 76.424130][ T47] Call trace: [ 76.425075][ T47] dump_backtrace+0x1c8/0x1f4 [ 76.426367][ T47] show_stack+0x2c/0x3c [ 76.427490][ T47] __dump_stack+0x30/0x40 [ 76.428784][ T47] dump_stack_lvl+0xf8/0x160 [ 76.430042][ T47] dump_stack+0x1c/0x5c [ 76.431253][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 76.432734][ T47] kobject_add_internal+0x5a8/0xb30 [ 76.434183][ T47] kobject_add+0x134/0x1f8 [ 76.435406][ T47] device_add+0x3f0/0xf94 [ 76.436583][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 76.437912][ T47] le_conn_complete_evt+0xa24/0xf8c [ 76.438925][ T14] usb 1-1: config 0 has no interfaces? [ 76.439339][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 76.440959][ T14] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 76.442433][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 76.444880][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.446179][ T47] hci_event_packet+0x6ac/0xf08 [ 76.446204][ T47] hci_rx_work+0x324/0xaa0 [ 76.446215][ T47] process_one_work+0x7f4/0x13a8 [ 76.446227][ T47] worker_thread+0x8c8/0xfbc [ 76.446236][ T47] kthread+0x250/0x2d8 [ 76.446248][ T47] ret_from_fork+0x10/0x20 [ 76.463876][ T47] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.467767][ T47] Bluetooth: hci1: failed to register connection device [ 76.558298][ T14] usb 1-1: config 0 descriptor?? [ 76.751840][ T4673] tipc: Enabled bearer , priority 0 [ 76.844350][ T4673] device syzkaller0 entered promiscuous mode [ 76.863535][ T47] Bluetooth: hci4: Malformed HCI Event [ 76.915831][ T4673] tipc: Resetting bearer [ 76.917662][ T7] usb 1-1: USB disconnect, device number 2 [ 76.970664][ T4671] tipc: Resetting bearer [ 76.979965][ T4676] binder: 4675:4676 got transaction to invalid handle, 1 [ 77.005459][ T4676] binder: 4676:4675 cannot find target node [ 77.013956][ T4676] binder: 4675:4676 transaction call to 0:0 failed 7/29201/-22, size 0-0 line 3054 [ 77.058501][ T4671] tipc: Disabling bearer [ 77.116659][ T4677] binder: 4675:4677 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.128455][ T4677] binder: 4677 RLIMIT_NICE not set [ 77.137091][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.565774][ T4693] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.68'. [ 77.574566][ T4679] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.68'. [ 78.593388][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 78.596476][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 78.598657][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.601421][ T47] Workqueue: hci3 hci_rx_work [ 78.602692][ T47] Call trace: [ 78.603629][ T47] dump_backtrace+0x1c8/0x1f4 [ 78.604974][ T47] show_stack+0x2c/0x3c [ 78.606165][ T47] __dump_stack+0x30/0x40 [ 78.607389][ T47] dump_stack_lvl+0xf8/0x160 [ 78.608671][ T47] dump_stack+0x1c/0x5c [ 78.609805][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 78.611189][ T47] kobject_add_internal+0x5a8/0xb30 [ 78.612605][ T47] kobject_add+0x134/0x1f8 [ 78.613753][ T47] device_add+0x3f0/0xf94 [ 78.614921][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 78.616284][ T47] le_conn_complete_evt+0xa24/0xf8c [ 78.617727][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 78.619237][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 78.620538][ T47] hci_event_packet+0x6ac/0xf08 [ 78.621916][ T47] hci_rx_work+0x324/0xaa0 [ 78.623220][ T47] process_one_work+0x7f4/0x13a8 [ 78.624571][ T47] worker_thread+0x8c8/0xfbc [ 78.625920][ T47] kthread+0x250/0x2d8 [ 78.627080][ T47] ret_from_fork+0x10/0x20 [ 78.628594][ T47] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.632091][ T47] Bluetooth: hci3: failed to register connection device [ 80.275419][ T4772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.414525][ T4774] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 80.435737][ T4774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.80'. [ 80.773785][ T4774] team0: Port device geneve0 added [ 80.787609][ T4776] device bridge0 entered promiscuous mode [ 80.789456][ T4776] device macvlan2 entered promiscuous mode [ 80.889475][ T4772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.240085][ T4772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.022320][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 83.025172][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 83.027548][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.030388][ T47] Workqueue: hci2 hci_rx_work [ 83.031706][ T47] Call trace: [ 83.032611][ T47] dump_backtrace+0x1c8/0x1f4 [ 83.033907][ T47] show_stack+0x2c/0x3c [ 83.035068][ T47] __dump_stack+0x30/0x40 [ 83.036213][ T47] dump_stack_lvl+0xf8/0x160 [ 83.037419][ T47] dump_stack+0x1c/0x5c [ 83.038534][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 83.039909][ T47] kobject_add_internal+0x5a8/0xb30 [ 83.041341][ T47] kobject_add+0x134/0x1f8 [ 83.042611][ T47] device_add+0x3f0/0xf94 [ 83.043866][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 83.045248][ T47] le_conn_complete_evt+0xa24/0xf8c [ 83.046695][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 83.048219][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 83.049533][ T47] hci_event_packet+0x6ac/0xf08 [ 83.050853][ T47] hci_rx_work+0x324/0xaa0 [ 83.052087][ T47] process_one_work+0x7f4/0x13a8 [ 83.053448][ T47] worker_thread+0x8c8/0xfbc [ 83.054758][ T47] kthread+0x250/0x2d8 [ 83.055928][ T47] ret_from_fork+0x10/0x20 [ 83.062786][ T47] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.067539][ T47] Bluetooth: hci2: failed to register connection device [ 84.686866][ T4772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.713317][ T4841] device vlan2 entered promiscuous mode [ 84.721687][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 85.233822][ T4868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.310831][ T4868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.331718][ T4772] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.936226][ C0] sched: RT throttling activated [ 87.353037][ T4772] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.362427][ T4772] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.368482][ T4772] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.684148][ T4889] ubi31: attaching mtd0 [ 87.691609][ T4889] ubi31: scanning is finished [ 88.046827][ T4889] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 88.049075][ T4889] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.051255][ T4889] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.053315][ T4889] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 88.055488][ T4889] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.057650][ T4889] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.060037][ T4889] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 749922163 [ 88.062888][ T4889] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.112605][ T4890] ubi31: background thread "ubi_bgt31d" started, PID 4890 [ 88.754015][ T4900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.757122][ T4900] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 88.860259][ T4901] xt_hashlimit: max too large, truncated to 1048576 [ 90.103496][ T4904] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 91.408546][ T4920] tipc: Enabled bearer , priority 0 [ 91.411245][ T4920] device syzkaller0 entered promiscuous mode [ 91.437049][ T4920] tipc: Resetting bearer [ 91.441566][ T4919] tipc: Resetting bearer [ 91.517128][ T4919] tipc: Disabling bearer [ 92.673095][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.682784][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.742565][ T4946] xt_hashlimit: max too large, truncated to 1048576 [ 93.435674][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 93.449305][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 93.550555][ T4962] tipc: Started in network mode [ 93.561510][ T4962] tipc: Node identity 7a7cfe047d09, cluster identity 4711 [ 93.566752][ T4962] tipc: Enabled bearer , priority 0 [ 93.570619][ T4962] device syzkaller0 entered promiscuous mode [ 93.595440][ T4962] tipc: Resetting bearer [ 93.607216][ T4961] tipc: Resetting bearer [ 93.613182][ T4964] block device autoloading is deprecated and will be removed. [ 93.667239][ T4961] tipc: Disabling bearer [ 93.813263][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 93.874567][ T4970] loop2: detected capacity change from 0 to 7 [ 93.886604][ T4460] Dev loop2: unable to read RDB block 7 [ 93.888281][ T4460] loop2: AHDI p1 p2 p3 [ 93.889377][ T4460] loop2: partition table partially beyond EOD, truncated [ 93.895499][ T4460] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.903167][ T4460] loop2: p2 start 1702059890 is beyond EOD, truncated [ 93.939914][ T4970] Dev loop2: unable to read RDB block 7 [ 93.941524][ T4970] loop2: AHDI p1 p2 p3 [ 93.942888][ T4970] loop2: partition table partially beyond EOD, truncated [ 93.960759][ T4970] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.966169][ T4970] loop2: p2 start 1702059890 is beyond EOD, truncated [ 94.326627][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 95.007255][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 95.214138][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 96.678255][ T5000] atomic_op 000000008a00d0f9 conn xmit_atomic 0000000000000000 [ 97.198473][ T5006] tipc: Enabled bearer , priority 0 [ 97.210659][ T5006] device syzkaller0 entered promiscuous mode [ 97.242947][ T5006] tipc: Resetting bearer [ 97.281835][ T5005] tipc: Resetting bearer [ 97.437723][ T5005] tipc: Disabling bearer [ 100.384627][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 101.415845][ T5041] device syzkaller0 entered promiscuous mode [ 101.426571][ T5052] tipc: Started in network mode [ 101.427966][ T5052] tipc: Node identity 3266a53eb482, cluster identity 4711 [ 101.430182][ T5052] tipc: Enabled bearer , priority 0 [ 101.432926][ T5048] tipc: Started in network mode [ 101.434318][ T5048] tipc: Node identity 7e9ed7c40dcd, cluster identity 4711 [ 101.445516][ T5048] tipc: Enabled bearer , priority 0 [ 101.461752][ T5048] device syzkaller0 entered promiscuous mode [ 101.469553][ T5040] tipc: Resetting bearer [ 101.538052][ T5040] tipc: Disabling bearer [ 101.545242][ T5048] tipc: Resetting bearer [ 101.552845][ T5046] tipc: Resetting bearer [ 101.587125][ T5046] tipc: Disabling bearer [ 101.600796][ T5060] block device autoloading is deprecated and will be removed. [ 103.137339][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 103.325802][ T5080] Bluetooth: MGMT ver 1.22 [ 103.844249][ T5086] xt_hashlimit: max too large, truncated to 1048576 [ 104.434398][ T5105] tipc: Enabled bearer , priority 0 [ 104.440555][ T5105] device syzkaller0 entered promiscuous mode [ 104.492290][ T5105] tipc: Resetting bearer [ 104.550144][ T5102] tipc: Resetting bearer [ 104.625026][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.636550][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.680615][ T5102] tipc: Disabling bearer [ 105.650514][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 105.906387][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.110243][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.114827][ T14] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 106.123435][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.894681][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 106.897875][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 106.956614][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.993829][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.996136][ T14] usb 1-1: Product: syz [ 107.007884][ T14] usb 1-1: Manufacturer: syz [ 107.039583][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 107.041163][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 107.058072][ T14] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 107.064367][ T14] cdc_wdm 1-1:1.0: Unknown control protocol [ 108.656113][ T5156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.188'. [ 108.829482][ T4595] usb 1-1: USB disconnect, device number 3 [ 108.935485][ T5159] binder: 5158:5159 tried to acquire reference to desc 0, got 1 instead [ 108.939988][ T5159] binder: 5158:5159 got transaction with fd, 3, but target does not allow fds [ 108.942789][ T5159] binder: 5159:5158 translate fd failed [ 108.944477][ T5159] binder: 5158:5159 transaction async to 5158:0 failed 12/29201/-1, size 104-24 line 3424 [ 108.953067][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 108.958073][ T4355] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.559697][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 112.606710][ T47] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 114.747231][ T47] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 114.749742][ T47] Bluetooth: hci1: Injecting HCI hardware error event [ 114.752690][ T4314] Bluetooth: hci1: hardware error 0x00 [ 116.083103][ T5222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.472408][ T5293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.234'. [ 117.076971][ T4314] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.774276][ T5348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.779343][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.954720][ T5347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 123.991040][ T5385] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 125.962822][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.981855][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.168804][ T5412] tipc: Enabled bearer , priority 0 [ 126.172949][ T5412] device syzkaller0 entered promiscuous mode [ 126.268394][ T5411] tipc: Resetting bearer [ 126.489668][ T5411] tipc: Disabling bearer [ 126.489955][ T4314] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 129.570932][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.627706][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 129.667796][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 129.701108][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 129.752052][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 129.772059][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 129.776912][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 129.810748][ T5535] tipc: Enabled bearer , priority 0 [ 129.813296][ T5535] device syzkaller0 entered promiscuous mode [ 129.985791][ T5534] tipc: Resetting bearer [ 130.148067][ T5534] tipc: Disabling bearer [ 130.187005][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.278670][ T4314] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 130.282935][ T4314] CPU: 1 PID: 4314 Comm: kworker/u5:3 Not tainted 6.1.146-syzkaller #0 [ 130.285179][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.287990][ T4314] Workqueue: hci0 hci_rx_work [ 130.289294][ T4314] Call trace: [ 130.290189][ T4314] dump_backtrace+0x1c8/0x1f4 [ 130.291472][ T4314] show_stack+0x2c/0x3c [ 130.292588][ T4314] __dump_stack+0x30/0x40 [ 130.293788][ T4314] dump_stack_lvl+0xf8/0x160 [ 130.294991][ T4314] dump_stack+0x1c/0x5c [ 130.296123][ T4314] sysfs_create_dir_ns+0x22c/0x24c [ 130.297592][ T4314] kobject_add_internal+0x5a8/0xb30 [ 130.298993][ T4314] kobject_add+0x134/0x1f8 [ 130.300317][ T4314] device_add+0x3f0/0xf94 [ 130.301522][ T4314] hci_conn_add_sysfs+0xbc/0x1cc [ 130.302845][ T4314] le_conn_complete_evt+0xa24/0xf8c [ 130.304221][ T4314] hci_le_conn_complete_evt+0x114/0x3f8 [ 130.305681][ T4314] hci_le_meta_evt+0x2c0/0x4a4 [ 130.306993][ T4314] hci_event_packet+0x6ac/0xf08 [ 130.308361][ T4314] hci_rx_work+0x324/0xaa0 [ 130.309600][ T4314] process_one_work+0x7f4/0x13a8 [ 130.310962][ T4314] worker_thread+0x8c8/0xfbc [ 130.312317][ T4314] kthread+0x250/0x2d8 [ 130.313442][ T4314] ret_from_fork+0x10/0x20 [ 130.314941][ T4314] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.319215][ T4314] Bluetooth: hci0: failed to register connection device [ 130.336973][ T14] usb 1-1: device descriptor read/64, error -71 [ 130.778003][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.966459][ T14] usb 1-1: device descriptor read/64, error -71 [ 131.087086][ T14] usb usb1-port1: attempt power cycle [ 131.329907][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.331624][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.496306][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.531949][ T14] usb 1-1: device descriptor read/8, error -71 [ 131.796314][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.826917][ T14] usb 1-1: device descriptor read/8, error -71 [ 131.952026][ T14] usb usb1-port1: unable to enumerate USB device [ 132.225888][ T5575] tipc: Enabling of bearer rejected, failed to enable media [ 132.347374][ T4314] Bluetooth: hci0: command 0x2016 tx timeout [ 132.503014][ T47] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 132.751117][ T5587] loop1: detected capacity change from 0 to 512 [ 132.799206][ T5587] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1) [ 134.771310][ T5611] tipc: Enabling of bearer rejected, failed to enable media [ 134.827267][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 134.830122][ T47] CPU: 1 PID: 47 Comm: kworker/u5:0 Not tainted 6.1.146-syzkaller #0 [ 134.832319][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.835072][ T47] Workqueue: hci4 hci_rx_work [ 134.836340][ T47] Call trace: [ 134.837237][ T47] dump_backtrace+0x1c8/0x1f4 [ 134.838486][ T47] show_stack+0x2c/0x3c [ 134.839680][ T47] __dump_stack+0x30/0x40 [ 134.840854][ T47] dump_stack_lvl+0xf8/0x160 [ 134.842171][ T47] dump_stack+0x1c/0x5c [ 134.843265][ T47] sysfs_create_dir_ns+0x22c/0x24c [ 134.844687][ T47] kobject_add_internal+0x5a8/0xb30 [ 134.846097][ T47] kobject_add+0x134/0x1f8 [ 134.847303][ T47] device_add+0x3f0/0xf94 [ 134.848459][ T47] hci_conn_add_sysfs+0xbc/0x1cc [ 134.849874][ T47] le_conn_complete_evt+0xa24/0xf8c [ 134.851270][ T47] hci_le_conn_complete_evt+0x114/0x3f8 [ 134.852736][ T47] hci_le_meta_evt+0x2c0/0x4a4 [ 134.854017][ T47] hci_event_packet+0x6ac/0xf08 [ 134.855338][ T47] hci_rx_work+0x324/0xaa0 [ 134.856551][ T47] process_one_work+0x7f4/0x13a8 [ 134.857859][ T47] worker_thread+0x8c8/0xfbc [ 134.859181][ T47] kthread+0x250/0x2d8 [ 134.860289][ T47] ret_from_fork+0x10/0x20 [ 134.861796][ T47] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.865281][ T47] Bluetooth: hci4: failed to register connection device [ 135.334786][ T5625] loop1: detected capacity change from 0 to 512 [ 135.356077][ T5625] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1) [ 136.916493][ T47] Bluetooth: hci4: command 0x2016 tx timeout [ 137.232308][ T5654] tipc: Enabled bearer , priority 0 [ 137.244062][ T5647] device syzkaller0 entered promiscuous mode [ 137.392762][ T5645] tipc: Resetting bearer [ 138.228198][ T4418] tipc: Node number set to 1934874564 [ 138.230662][ T5645] tipc: Disabling bearer [ 140.246969][ T5684] loop1: detected capacity change from 0 to 512 [ 140.446279][ T5684] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1) [ 143.045853][ T5714] tipc: Enabled bearer , priority 0 [ 143.076113][ T5714] device syzkaller0 entered promiscuous mode [ 143.931194][ T5713] tipc: Resetting bearer [ 144.087268][ T4376] tipc: Node number set to 2263131454 [ 144.368913][ T5713] tipc: Disabling bearer [ 145.221469][ T47] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 148.393031][ T5790] tipc: Enabled bearer , priority 0 [ 149.170827][ T5798] tipc: Resetting bearer [ 149.447283][ T4418] tipc: Node number set to 3028680704 [ 149.692823][ T5789] tipc: Disabling bearer [ 152.056055][ T5837] loop2: detected capacity change from 0 to 512 [ 152.063452][ T5842] device syzkaller0 entered promiscuous mode [ 152.103733][ T5837] EXT4-fs (loop2): first meta block group too large: 4294967295 (group descriptor block count 1) [ 152.461891][ T4462] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.281464][ T5861] tipc: Enabled bearer , priority 0 [ 154.563886][ T5865] tipc: Resetting bearer [ 154.741919][ T5860] tipc: Disabling bearer [ 155.363144][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.365821][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.534153][ T5978] loop4: detected capacity change from 0 to 512 [ 157.553550][ T5978] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1) [ 158.761446][ T5983] device syzkaller0 entered promiscuous mode [ 161.247233][ T4490] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.426670][ T4490] usb 1-1: device descriptor read/64, error -71 [ 161.770237][ T4490] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.913953][ T4490] usb 1-1: device descriptor read/64, error -71 [ 163.541659][ T4490] usb usb1-port1: attempt power cycle [ 163.926347][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 163.928319][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 163.930122][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 163.976454][ T4490] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.196548][ T4490] usb 1-1: device not accepting address 10, error -71 [ 169.816391][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.232794][ T7] usb 1-1: device descriptor read/64, error -71 [ 170.687400][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.836334][ T7] usb 1-1: device descriptor read/64, error -71 [ 171.024614][ T7] usb usb1-port1: attempt power cycle [ 172.517708][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.546574][ T7] usb 1-1: device descriptor read/8, error -71 [ 174.449960][ T6162] device syzkaller0 entered promiscuous mode [ 174.493341][ T6162] tipc: Enabled bearer , priority 0 [ 174.681770][ T6156] tipc: Resetting bearer [ 175.458732][ T6156] tipc: Disabling bearer [ 180.747198][ T6292] device syzkaller0 entered promiscuous mode [ 180.847490][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.859686][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.201054][ T6314] device syzkaller0 entered promiscuous mode [ 183.530895][ T6316] tipc: Enabled bearer , priority 0 [ 183.572104][ T6313] tipc: Resetting bearer [ 183.907389][ T6313] tipc: Disabling bearer [ 184.436470][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 187.185703][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.202765][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.527424][ T6360] device syzkaller0 entered promiscuous mode [ 190.187734][ T6393] tipc: Enabled bearer , priority 0 [ 190.199517][ T6392] tipc: Disabling bearer [ 192.889238][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.891037][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.919205][ T6421] tipc: Enabling of bearer rejected, failed to enable media [ 198.896753][ T47] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 198.901127][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.903579][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.932310][ T6465] tipc: Enabling of bearer rejected, failed to enable media [ 198.953027][ T6462] tipc: Enabling of bearer rejected, failed to enable media [ 201.634085][ T6502] tipc: Enabling of bearer rejected, failed to enable media [ 202.673691][ T47] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 202.697656][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.717489][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.050937][ T6536] tipc: Enabled bearer , priority 0 [ 204.072717][ T6535] tipc: Disabling bearer [ 204.245708][ T6547] tipc: Enabling of bearer rejected, failed to enable media [ 206.735401][ T47] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 206.738333][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.742705][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.872327][ T6570] tipc: Enabling of bearer rejected, failed to enable media [ 206.987921][ T6574] tipc: Enabled bearer , priority 0 [ 207.011473][ T6572] tipc: Disabling bearer [ 207.942959][ T6585] tipc: Enabling of bearer rejected, failed to enable media [ 210.198355][ T6684] tipc: Enabling of bearer rejected, failed to enable media [ 210.289743][ T6687] tipc: Enabled bearer , priority 0 [ 210.310513][ T6686] tipc: Disabling bearer [ 210.962044][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 215.014178][ T6792] tipc: Enabling of bearer rejected, failed to enable media [ 216.849981][ T6817] tipc: Enabling of bearer rejected, failed to enable media [ 216.879649][ T47] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 218.858470][ T6909] loop2: detected capacity change from 0 to 2048 [ 219.026700][ T6909] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 219.131238][ T6915] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.453049][ T6920] mkiss: ax0: crc mode is auto. [ 220.043026][ T4314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.047280][ T4314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.050835][ T4314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.053643][ T4314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.083663][ T4314] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 220.087147][ T4314] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.091784][ T4314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.199698][ T6807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.210379][ T6932] tipc: Enabling of bearer rejected, failed to enable media [ 220.369347][ T6807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.722651][ T6807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.400753][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 222.412834][ T6807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.011486][ T7037] loop1: detected capacity change from 0 to 2048 [ 223.308709][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 223.381572][ T7037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.542697][ T7047] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.724512][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.744859][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.763082][ T6929] device bridge_slave_0 entered promiscuous mode [ 224.103248][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.105337][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.108636][ T6929] device bridge_slave_1 entered promiscuous mode [ 224.247919][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.253829][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.301406][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 224.476563][ T4314] Bluetooth: hci4: command 0x041b tx timeout [ 224.544252][ T6807] tipc: Left network mode [ 224.559408][ T6929] team0: Port device team_slave_0 added [ 224.576034][ T6929] team0: Port device team_slave_1 added [ 225.222999][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.225104][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.243264][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.254871][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.278999][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.306243][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.606484][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 226.830728][ T6929] device hsr_slave_0 entered promiscuous mode [ 227.216605][ T6929] device hsr_slave_1 entered promiscuous mode [ 228.127070][ T6929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.129502][ T6929] Cannot create hsr debugfs directory [ 228.676514][ T4314] Bluetooth: hci4: command 0x0419 tx timeout [ 229.647088][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.652394][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.655210][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.944143][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.449271][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.456170][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.516681][ T4314] Bluetooth: hci2: command 0x0409 tx timeout [ 232.551115][ T6929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.698189][ T6929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.728399][ T6929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.963451][ T6929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.596618][ T4314] Bluetooth: hci2: command 0x041b tx timeout [ 234.673091][ T6807] device hsr_slave_0 left promiscuous mode [ 234.890286][ T6807] device hsr_slave_1 left promiscuous mode [ 235.766558][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.768787][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.793853][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.906360][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.137788][ T6807] device bridge_slave_1 left promiscuous mode [ 236.141000][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.413962][ T6807] device bridge_slave_0 left promiscuous mode [ 236.415974][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.623782][ T6807] device veth1_macvtap left promiscuous mode [ 236.626156][ T6807] device veth0_macvtap left promiscuous mode [ 236.628114][ T6807] device veth1_vlan left promiscuous mode [ 236.629946][ T6807] device veth0_vlan left promiscuous mode [ 236.666872][ T4314] Bluetooth: hci2: command 0x040f tx timeout [ 238.592261][ T6807] team0 (unregistering): Port device team_slave_1 removed [ 238.746918][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 238.798548][ T6807] team0 (unregistering): Port device team_slave_0 removed [ 238.968472][ T6807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.168396][ T6807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.553414][ T6807] bond0 (unregistering): Released all slaves [ 241.854097][ T7429] tipc: Enabled bearer , priority 0 [ 242.019504][ T7427] tipc: Disabling bearer [ 242.052509][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 242.224792][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.282038][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.284857][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.333896][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.396653][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.399771][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.402570][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.404593][ T4808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.427048][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.431500][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.443248][ T7197] device bridge_slave_0 entered promiscuous mode [ 242.452487][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.455377][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.459487][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.466487][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.468627][ T4808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.481196][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.498156][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.525160][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.542714][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.551752][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.559363][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.570561][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.572570][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.575070][ T7197] device bridge_slave_1 entered promiscuous mode [ 242.617397][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.620291][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.623403][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.689773][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.692849][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.706983][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.744890][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.773826][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.875923][ T7197] team0: Port device team_slave_0 added [ 242.893419][ T7197] team0: Port device team_slave_1 added [ 242.984379][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.994580][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.033306][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.065920][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.086327][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.135137][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.408481][ T7197] device hsr_slave_0 entered promiscuous mode [ 243.473366][ T7197] device hsr_slave_1 entered promiscuous mode [ 244.268942][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.271217][ T7197] Cannot create hsr debugfs directory [ 246.290361][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.292887][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.333113][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.868761][ T5498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.881780][ T7588] tipc: Enabled bearer , priority 0 [ 246.883927][ T7197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.928012][ T7197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.972486][ T7582] tipc: Disabling bearer [ 247.004480][ T5498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.036013][ T7197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.081432][ T7197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.168281][ T5498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.358212][ T5498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.413439][ T7613] loop1: detected capacity change from 0 to 2048 [ 247.444603][ T7613] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.496704][ T7616] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.191467][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.194601][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.382730][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.385787][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.413842][ T6929] device veth0_vlan entered promiscuous mode [ 248.464200][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.467401][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.527600][ T6929] device veth1_vlan entered promiscuous mode [ 248.723945][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.727520][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.753204][ T6929] device veth0_macvtap entered promiscuous mode [ 248.789650][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.793642][ T6929] device veth1_macvtap entered promiscuous mode [ 248.799602][ T5498] tipc: Left network mode [ 248.900534][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.912713][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.929196][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.943035][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.953388][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.000482][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.037203][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.040466][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.057851][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.419669][ T7641] tipc: Enabling of bearer rejected, failed to enable media [ 249.446797][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.457692][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.460712][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.463978][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.491713][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.512721][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.537659][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.699095][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.702442][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.705481][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.722376][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.726443][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.729848][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.736596][ T6929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.739512][ T6929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.753832][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.765999][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.769166][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.865491][ T6929] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.870169][ T6929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.872492][ T6929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.876958][ T6929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.888522][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.891359][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.894001][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.896137][ T4808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.906112][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.928162][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.937314][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.945495][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.947492][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.957272][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.903949][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.961214][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.964683][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.969333][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.989186][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.094863][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.117661][ T7197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.120861][ T7197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.125102][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.141266][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.149214][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.164315][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.190080][ T7669] loop1: detected capacity change from 0 to 2048 [ 251.240962][ T7669] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 251.276846][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.296374][ T7674] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.329402][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.332109][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.547143][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.563229][ T4808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.565652][ T4808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.667021][ T7682] mkiss: ax0: crc mode is auto. [ 252.309224][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.459643][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.462219][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.464589][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.967449][ T7699] usb usb8: usbfs: process 7699 (syz.5.688) did not claim interface 0 before use [ 253.947647][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.949970][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.011572][ T7710] tipc: Enabling of bearer rejected, failed to enable media [ 254.326482][ T5498] device hsr_slave_0 left promiscuous mode [ 254.368661][ T5498] device hsr_slave_1 left promiscuous mode [ 254.418467][ T7737] loop5: detected capacity change from 0 to 2048 [ 254.462696][ T7737] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 254.496482][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.498686][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.507072][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.509308][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.512530][ T5498] device bridge_slave_1 left promiscuous mode [ 254.514531][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.521387][ T7739] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.657642][ T5498] device bridge_slave_0 left promiscuous mode [ 254.659609][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.022391][ T5498] device bridge0 left promiscuous mode [ 255.286837][ T5498] device veth1_macvtap left promiscuous mode [ 255.288821][ T5498] device veth0_macvtap left promiscuous mode [ 255.294926][ T5498] device veth1_vlan left promiscuous mode [ 255.299105][ T5498] device veth0_vlan left promiscuous mode [ 258.670033][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 259.652847][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 259.907048][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.132486][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.602614][ T5498] bond0 (unregistering): Released all slaves [ 262.817592][ T7734] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 262.937397][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.947983][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.987841][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.991026][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.995095][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.031157][ T7777] loop5: detected capacity change from 0 to 2048 [ 263.036556][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.061830][ T7197] device veth0_vlan entered promiscuous mode [ 263.331645][ T7777] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 263.562969][ T7197] device veth1_vlan entered promiscuous mode [ 263.887121][ T7789] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.901112][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.904146][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.100181][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.103396][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.289881][ T7197] device veth0_macvtap entered promiscuous mode [ 264.319645][ T7197] device veth1_macvtap entered promiscuous mode [ 264.359825][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.362704][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.365409][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.381898][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.384791][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.436332][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.439219][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.442089][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.460335][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.462941][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.465672][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.480357][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.490524][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.509729][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.512996][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.515858][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.538532][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.541525][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.558598][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.561575][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.564372][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.607012][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.619387][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.622813][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.630753][ T7197] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.642890][ T7197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.654619][ T7197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.671694][ T7197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.509757][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 266.001722][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.004213][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.139531][ T6807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.169219][ T7169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.173874][ T7169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.182608][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.419703][ T5498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.439602][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.446658][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.450960][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.454671][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.458545][ T4316] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.461021][ T4316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.780528][ T7860] ================================================================== [ 269.783018][ T7860] BUG: KASAN: use-after-free in rose_transmit_link+0x4f8/0x66c [ 269.785184][ T7860] Read of size 1 at addr ffff0000f22a0832 by task syz.6.720/7860 [ 269.787359][ T7860] [ 269.788100][ T7860] CPU: 0 PID: 7860 Comm: syz.6.720 Not tainted 6.1.146-syzkaller #0 [ 269.790414][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.793384][ T7860] Call trace: [ 269.794326][ T7860] dump_backtrace+0x1c8/0x1f4 [ 269.795873][ T7860] show_stack+0x2c/0x3c [ 269.797104][ T7860] __dump_stack+0x30/0x40 [ 269.798297][ T7860] dump_stack_lvl+0xf8/0x160 [ 269.799623][ T7860] print_address_description+0x88/0x200 [ 269.801233][ T7860] print_report+0x50/0x68 [ 269.802490][ T7860] kasan_report+0xa8/0x100 [ 269.803770][ T7860] __asan_report_load1_noabort+0x2c/0x38 [ 269.805369][ T7860] rose_transmit_link+0x4f8/0x66c [ 269.806769][ T7860] rose_write_internal+0xeec/0x17c0 [ 269.808239][ T7860] rose_release+0x224/0x518 [ 269.809558][ T7860] sock_close+0xb4/0x1f8 [ 269.810729][ T7860] __fput+0x1bc/0x7c0 [ 269.811891][ T7860] ____fput+0x20/0x30 [ 269.812998][ T7860] task_work_run+0x1ec/0x270 [ 269.814290][ T7860] get_signal+0x1120/0x1310 [ 269.815549][ T7860] do_notify_resume+0x340/0x2b0c [ 269.816952][ T7860] el0_svc+0x98/0x138 [ 269.818084][ T7860] el0t_64_sync_handler+0x84/0xf0 [ 269.819523][ T7860] el0t_64_sync+0x18c/0x190 [ 269.820775][ T7860] [ 269.821451][ T7860] Allocated by task 4981: [ 269.822654][ T7860] kasan_set_track+0x4c/0x80 [ 269.824141][ T7860] kasan_save_alloc_info+0x28/0x34 [ 269.825704][ T7860] __kasan_kmalloc+0xa0/0xb8 [ 269.827003][ T7860] kmalloc_trace+0x7c/0x94 [ 269.828246][ T7860] rose_add_node+0x1f4/0xba4 [ 269.829606][ T7860] rose_rt_ioctl+0xa04/0xde4 [ 269.830961][ T7860] rose_ioctl+0x378/0xb80 [ 269.832172][ T7860] sock_do_ioctl+0xf8/0x240 [ 269.833453][ T7860] sock_ioctl+0x5c4/0x840 [ 269.834649][ T7860] __arm64_sys_ioctl+0x14c/0x1c8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.836108][ T7860] invoke_syscall+0x98/0x2bc [ 269.837384][ T7860] el0_svc_common+0x138/0x258 [ 269.838766][ T7860] do_el0_svc+0x58/0x13c [ 269.839978][ T7860] el0_svc+0x58/0x138 [ 269.841163][ T7860] el0t_64_sync_handler+0x84/0xf0 [ 269.842657][ T7860] el0t_64_sync+0x18c/0x190 [ 269.844038][ T7860] [ 269.844732][ T7860] Freed by task 7858: [ 269.845890][ T7860] kasan_set_track+0x4c/0x80 [ 269.847239][ T7860] kasan_save_free_info+0x3c/0x60 [ 269.848664][ T7860] ____kasan_slab_free+0x148/0x1b0 [ 269.850091][ T7860] __kasan_slab_free+0x18/0x28 [ 269.851394][ T7860] slab_free_freelist_hook+0x16c/0x1ec [ 269.852947][ T7860] __kmem_cache_free+0xc0/0x224 [ 269.854358][ T7860] kfree+0xd0/0x1ac [ 269.855399][ T7860] rose_remove_neigh+0x23c/0x2b8 [ 269.856793][ T7860] rose_rt_device_down+0x2d4/0x330 [ 269.858256][ T7860] rose_device_event+0x5d8/0x68c [ 269.859671][ T7860] raw_notifier_call_chain+0xd4/0x164 [ 269.861292][ T7860] __dev_notify_flags+0x250/0x46c [ 269.862742][ T7860] dev_change_flags+0xc8/0x154 [ 269.864075][ T7860] dev_ifsioc+0x524/0xed0 [ 269.865331][ T7860] dev_ioctl+0x4c8/0xc8c [ 269.866515][ T7860] sock_do_ioctl+0x18c/0x240 [ 269.867846][ T7860] sock_ioctl+0x5c4/0x840 [ 269.869120][ T7860] __arm64_sys_ioctl+0x14c/0x1c8 [ 269.870507][ T7860] invoke_syscall+0x98/0x2bc [ 269.871878][ T7860] el0_svc_common+0x138/0x258 [ 269.873374][ T7860] do_el0_svc+0x58/0x13c [ 269.874559][ T7860] el0_svc+0x58/0x138 [ 269.875671][ T7860] el0t_64_sync_handler+0x84/0xf0 [ 269.877064][ T7860] el0t_64_sync+0x18c/0x190 [ 269.878345][ T7860] [ 269.879007][ T7860] The buggy address belongs to the object at ffff0000f22a0800 [ 269.879007][ T7860] which belongs to the cache kmalloc-512 of size 512 [ 269.882941][ T7860] The buggy address is located 50 bytes inside of [ 269.882941][ T7860] 512-byte region [ffff0000f22a0800, ffff0000f22a0a00) [ 269.886674][ T7860] [ 269.887315][ T7860] The buggy address belongs to the physical page: [ 269.889207][ T7860] page:000000006f988e30 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1322a0 [ 269.892264][ T7860] head:000000006f988e30 order:2 compound_mapcount:0 compound_pincount:0 [ 269.894640][ T7860] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 269.897086][ T7860] raw: 05ffc00000010200 fffffc000368b900 dead000000000002 ffff0000c0002600 [ 269.899576][ T7860] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 269.902102][ T7860] page dumped because: kasan: bad access detected [ 269.904029][ T7860] [ 269.904646][ T7860] Memory state around the buggy address: [ 269.906330][ T7860] ffff0000f22a0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 269.908644][ T7860] ffff0000f22a0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 269.910938][ T7860] >ffff0000f22a0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.913066][ T7860] ^ [ 269.914455][ T7860] ffff0000f22a0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.916679][ T7860] ffff0000f22a0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.919062][ T7860] ================================================================== [ 270.144281][ T5498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.381534][ T5498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.428007][ T7860] Disabling lock debugging due to kernel taint [ 270.429881][ T7860] ------------[ cut here ]------------ [ 270.431444][ T7860] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 270.435140][ T7860] WARNING: CPU: 1 PID: 7860 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 270.437847][ T7860] Modules linked in: [ 270.438950][ T7860] CPU: 1 PID: 7860 Comm: syz.6.720 Tainted: G B 6.1.146-syzkaller #0 [ 270.441525][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.444287][ T7860] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 270.446489][ T7860] pc : debug_print_object+0x148/0x1d4 [ 270.448208][ T7860] lr : debug_print_object+0x148/0x1d4 [ 270.449741][ T7860] sp : ffff800020c17620 [ 270.450938][ T7860] x29: ffff800020c17620 x28: dfff800000000000 x27: 0000000000000000 [ 270.453165][ T7860] x26: ffff8000150b0000 x25: ffff8000083ae084 x24: dfff800000000000 [ 270.455406][ T7860] x23: 0000000000000000 x22: ffff800010ac6a88 x21: ffff800011f9a440 [ 270.457669][ T7860] x20: ffff800011acad00 x19: ffff800011f99f80 x18: ffff800011aabce0 [ 270.459867][ T7860] x17: 0000000000000040 x16: ffff800008042c60 x15: 0000000000000000 [ 270.462151][ T7860] x14: 0000000000000100 x13: 0b478d2733ffd700 x12: 0000000000080000 [ 270.464361][ T7860] x11: 000000000002bff3 x10: ffff800025c7b000 x9 : 0b478d2733ffd700 [ 270.466585][ T7860] x8 : 0b478d2733ffd700 x7 : 0000000000000000 x6 : ffff800011a1be54 [ 270.468832][ T7860] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 270.471080][ T7860] x2 : ffff800020c17280 x1 : 0000000000000000 x0 : ffff800011a1ca68 [ 270.473284][ T7860] Call trace: [ 270.474219][ T7860] debug_print_object+0x148/0x1d4 [ 270.475607][ T7860] debug_object_assert_init+0x250/0x2c8 [ 270.477166][ T7860] timer_delete+0x48/0x1e8 [ 270.478349][ T7860] rose_transmit_link+0x43c/0x66c [ 270.479736][ T7860] rose_write_internal+0xeec/0x17c0 [ 270.481124][ T7860] rose_release+0x224/0x518 [ 270.482385][ T7860] sock_close+0xb4/0x1f8 [ 270.483576][ T7860] __fput+0x1bc/0x7c0 [ 270.484691][ T7860] ____fput+0x20/0x30 [ 270.485837][ T7860] task_work_run+0x1ec/0x270 [ 270.487094][ T7860] get_signal+0x1120/0x1310 [ 270.488346][ T7860] do_notify_resume+0x340/0x2b0c [ 270.489771][ T7860] el0_svc+0x98/0x138 [ 270.490863][ T7860] el0t_64_sync_handler+0x84/0xf0 [ 270.492218][ T7860] el0t_64_sync+0x18c/0x190 [ 270.493486][ T7860] irq event stamp: 823 [ 270.494679][ T7860] hardirqs last enabled at (823): [] kasan_quarantine_put+0xc4/0x204 [ 270.497249][ T7860] hardirqs last disabled at (822): [] kasan_quarantine_put+0x108/0x204 [ 270.500087][ T7860] softirqs last enabled at (642): [] lock_sock_nested+0xe0/0x130 [ 270.502799][ T7860] softirqs last disabled at (640): [] lock_sock_nested+0x88/0x130 [ 270.505944][ T7860] ---[ end trace 0000000000000000 ]--- [ 270.623017][ T5498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.887290][ T5498] tipc: Left network mode [ 272.847648][ T5498] device hsr_slave_0 left promiscuous mode [ 272.910915][ T5498] device hsr_slave_1 left promiscuous mode [ 272.966425][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.968567][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.971589][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.973606][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.977241][ T5498] device bridge_slave_1 left promiscuous mode [ 272.979149][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.007040][ T5498] device bridge_slave_0 left promiscuous mode [ 273.008883][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.147086][ T5498] device veth1_macvtap left promiscuous mode [ 273.148800][ T5498] device veth0_macvtap left promiscuous mode [ 273.150661][ T5498] device veth1_vlan left promiscuous mode [ 273.152289][ T5498] device veth0_vlan left promiscuous mode [ 274.899448][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 275.077219][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 275.297072][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.517698][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.941928][ T5498] bond0 (unregistering): Released all slaves