last executing test programs: 6.757168924s ago: executing program 3 (id=828): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) 6.56106345s ago: executing program 3 (id=831): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$1(0x1, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402005f00000001090224000100000000090400000003000200092100000001220000090581030000"], 0x0) 5.679382592s ago: executing program 3 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1", 0x12) 4.679468092s ago: executing program 3 (id=845): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x3d, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000540)={0x40, 0x15, 0x46, "73ce4809aead31214932b81ba9406709e22d1da608df534a5459185de445cd39d73292065084c728451d14980e3c6912b9ea25cdfc399f01d08a6df945096b1638202d5f0219"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000600)={0xc0, 0xa1, 0x4, 0x6d}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "dac7fce461a34589184121a0515bfbab23326148de4608df478fc4b82f45f46e67cdb75d5e54ec2bd7d8782a952907"}}) 4.560988462s ago: executing program 0 (id=846): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000160001002bbd7000fbdbdf250a000028"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000) 4.414957183s ago: executing program 0 (id=851): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$1(0x1, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402005f000000010902240001000000000904000000030002000921000000012200000905810300000000"], 0x0) 4.264738555s ago: executing program 4 (id=854): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='westwood\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}}, 0x40005) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', r7, 0x7800, 0x7800, 0x6, 0x6, {{0x2f, 0x4, 0x3, 0xd, 0xbc, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xc}, {@multicast2}, {@multicast1, 0x20000004}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @timestamp_prespec={0x44, 0x24, 0xfe, 0x3, 0x1, [{@rand_addr=0x64010101, 0xffff8000}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0x5b}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.138203137s ago: executing program 2 (id=855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000180)) 2.446904423s ago: executing program 1 (id=857): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) 2.444209183s ago: executing program 2 (id=858): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) close_range(r0, 0xffffffffffffffff, 0x0) 2.438119403s ago: executing program 4 (id=859): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 2.270564357s ago: executing program 1 (id=860): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, 0x0, 0x0) close(0x3) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route(r2, 0x0, 0x0) 2.155082196s ago: executing program 1 (id=861): unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) 1.866298309s ago: executing program 4 (id=862): unshare(0x26020480) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x57c) 1.437413164s ago: executing program 1 (id=863): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 1.345028332s ago: executing program 2 (id=864): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4", 0x4f) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.254620259s ago: executing program 4 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60156909001b2f00fc02000014c853ea0f09b76f000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c001880080000000000000008000240"], 0xa0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r6, 0x8b24, &(0x7f0000000040)) 1.252720089s ago: executing program 0 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0xffd4, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7, 0x10}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 1.228063371s ago: executing program 2 (id=867): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.139054668s ago: executing program 0 (id=868): unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r0, 0x0, 0x500}, 0x38) 1.129543879s ago: executing program 3 (id=869): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9efa}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.126629119s ago: executing program 2 (id=870): connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) close_range(r0, 0xffffffffffffffff, 0x0) 1.034847777s ago: executing program 1 (id=871): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='westwood\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}}, 0x40005) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 991.37967ms ago: executing program 0 (id=872): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 240.991291ms ago: executing program 3 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x154bc346}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0xb, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 141.281269ms ago: executing program 4 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 31.847467ms ago: executing program 4 (id=875): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) close_range(r0, 0xffffffffffffffff, 0x0) 30.827808ms ago: executing program 2 (id=876): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) close(0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000600)=""/235, 0xeb, 0x0, &(0x7f0000000700)=""/9, 0x9}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000040)={0x0, 0x40}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1ff, 0x2, 0x5, 0x8, 0x6, 0x4d8d}, {0xfff, 0x5, 0x2, 0x3, 0x1000, 0x7}], ['\x00', '\x00', '\x00']}) pipe(&(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 546.34µs ago: executing program 0 (id=877): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$1(0x1, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402005f000000010902240001000000000904000000030002000921000000012200000905810300000000"], 0x0) 0s ago: executing program 1 (id=878): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4", 0x4f) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.32' (ED25519) to the list of known hosts. [ 59.399589][ T4173] cgroup: Unknown subsys name 'net' [ 59.512767][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.928107][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.295939][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.446343][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.454531][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.462570][ T4197] device bridge_slave_0 entered promiscuous mode [ 62.503719][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.512074][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.520802][ T4197] device bridge_slave_1 entered promiscuous mode [ 62.532602][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.578055][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.592702][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.612910][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.632865][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.681180][ T4197] team0: Port device team_slave_0 added [ 62.695124][ T4197] team0: Port device team_slave_1 added [ 62.701065][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.769642][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.776778][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.803076][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.823185][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.830697][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.839036][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.859462][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.866451][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.892755][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.912368][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.919630][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.928024][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.949191][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.956268][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.964399][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.991842][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.999255][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.007264][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.014942][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.022178][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.030083][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.055471][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.062739][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.070966][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.086390][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.123553][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.140247][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.147592][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.155474][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.172793][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.193148][ T4197] device hsr_slave_0 entered promiscuous mode [ 63.200232][ T4197] device hsr_slave_1 entered promiscuous mode [ 63.207520][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.214585][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.223062][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.231597][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.242356][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.263161][ T4188] team0: Port device team_slave_0 added [ 63.277733][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.303253][ T4188] team0: Port device team_slave_1 added [ 63.349460][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.362135][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.379920][ T4191] team0: Port device team_slave_0 added [ 63.389013][ T4190] team0: Port device team_slave_0 added [ 63.404783][ T4190] team0: Port device team_slave_1 added [ 63.418331][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.425303][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.451400][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.471834][ T4191] team0: Port device team_slave_1 added [ 63.499356][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.506424][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.532469][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.554232][ T4183] team0: Port device team_slave_0 added [ 63.564404][ T4183] team0: Port device team_slave_1 added [ 63.577855][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.584822][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.610867][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.636398][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.643543][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.670557][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.696221][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.703479][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.729583][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.752760][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.759991][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.786097][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.802829][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.809952][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.835947][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.871191][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.878311][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.904411][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.922402][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.929817][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.936430][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.944871][ T4188] Cannot create hsr debugfs directory [ 64.024929][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.027522][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 64.037886][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.044410][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.052034][ T4190] Cannot create hsr debugfs directory [ 64.078446][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.085643][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.094589][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.102461][ T4191] Cannot create hsr debugfs directory [ 64.108164][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.115276][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.117088][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 64.121523][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 64.138236][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.145608][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.152497][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.160147][ T4183] Cannot create hsr debugfs directory [ 64.324647][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.356331][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.406329][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.435615][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.491102][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.504432][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.518788][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.535427][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.583898][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.594762][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.610042][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.623935][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.715919][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.726377][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.738340][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.766461][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.783017][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.807461][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.818568][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.828286][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.836077][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.844643][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.853670][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.867616][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.877016][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.885957][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.893240][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.902378][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.913826][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.931888][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.942983][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.951900][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.962555][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.969708][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.978670][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.988577][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.997218][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.004283][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.012133][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.037503][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.051126][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.065503][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.075277][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.084415][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.094058][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.103013][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.111489][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.118593][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.139244][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.150025][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.190214][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.200347][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.210788][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.219544][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.229209][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.239877][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.248646][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.259292][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.267813][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.276048][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.284961][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.293437][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.302123][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.312167][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.320677][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.329229][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.337889][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.346199][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.355013][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.371110][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.379232][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.391171][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.413137][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.456439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.467347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.484807][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.491939][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.527681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.546112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.555105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.563910][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.571045][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.600283][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.611705][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.669367][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.684918][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.694199][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.711841][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.721448][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.730809][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.739692][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.754254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.764157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.779224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.787843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.811184][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.824273][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.831987][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.844500][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.856137][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.892154][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.910385][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.932964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.943060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.970788][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.984299][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.017504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.036047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.046077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.056235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.064394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.074546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.082945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.091114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.099032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.106888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.107523][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 66.114863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.129126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.139535][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.149609][ T4197] device veth0_vlan entered promiscuous mode [ 66.158858][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.166771][ T4188] device veth0_vlan entered promiscuous mode [ 66.187960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.196830][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 66.197357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.202998][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 66.218122][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 66.218245][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.224212][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 66.231219][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.233163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.257154][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.265871][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.275438][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.282568][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.295847][ T4188] device veth1_vlan entered promiscuous mode [ 66.305286][ T4197] device veth1_vlan entered promiscuous mode [ 66.326034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.335120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.344226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.352664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.361770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.370514][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.377628][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.386383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.395410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.404793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.416352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.424789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.461567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.473634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.484465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.494969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.503662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.512900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.521885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.530553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.539702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.548302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.557271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.565716][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.572823][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.580759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.590326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.599491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.612697][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.630271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.640949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.659904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.678698][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.695851][ T4197] device veth0_macvtap entered promiscuous mode [ 66.727724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.740151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.750250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.761184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.770022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.778970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.787958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.796299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.804797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.813508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.829142][ T4197] device veth1_macvtap entered promiscuous mode [ 66.850814][ T4188] device veth0_macvtap entered promiscuous mode [ 66.859790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.871141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.883147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.895614][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.923759][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.934878][ T4188] device veth1_macvtap entered promiscuous mode [ 66.947482][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.955540][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.965719][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.981467][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.991259][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.008180][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.042275][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.051964][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.072531][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.081737][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.092077][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101091][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.119779][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.130609][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.141597][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.153439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.163137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.172121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.181910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.201226][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.222467][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.234936][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246487][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.272816][ T4191] device veth0_vlan entered promiscuous mode [ 67.283804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.292813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.303732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.312415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.321356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.329752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.340299][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.349337][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359550][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.368317][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.414744][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.422412][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.431896][ T4191] device veth1_vlan entered promiscuous mode [ 67.459951][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.475656][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.485443][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.496065][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.512221][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.547909][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.556484][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.603029][ T4191] device veth0_macvtap entered promiscuous mode [ 67.660521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.667707][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.675961][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.678109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.711758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.721864][ T4183] device veth0_vlan entered promiscuous mode [ 67.730077][ T4191] device veth1_macvtap entered promiscuous mode [ 67.752146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.763408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.772089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.781923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.810990][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.822109][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.834700][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.843171][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.851055][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.861188][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.872697][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.884384][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.896416][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.914948][ T4183] device veth1_vlan entered promiscuous mode [ 67.923283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.931702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.943049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.952855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.962682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.977790][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.994023][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.004323][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.015138][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.028788][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.039577][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.051240][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.066274][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075985][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.097776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.106974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.115710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.126171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.135271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.194009][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 68.200608][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.211408][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.223715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.236030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.245061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.272093][ T4183] device veth0_macvtap entered promiscuous mode [ 68.282400][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 68.294690][ T4190] device veth0_vlan entered promiscuous mode [ 68.301396][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 68.308460][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 68.315018][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 68.334429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.348910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.363158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.372641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.385930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.402209][ T4183] device veth1_macvtap entered promiscuous mode [ 68.423228][ T4190] device veth1_vlan entered promiscuous mode [ 68.547867][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.558318][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.569785][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.589149][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.607642][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.624846][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.636295][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.655469][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.666491][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.694389][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.729997][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.759118][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.803588][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.813515][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.821871][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.831878][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.842864][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.851267][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.863616][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.458075][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.472053][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.484839][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.501641][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.512513][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.529621][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.597919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.620010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.630673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.640168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.652616][ T4190] device veth0_macvtap entered promiscuous mode [ 69.670329][ T4190] device veth1_macvtap entered promiscuous mode [ 69.694646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.714436][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.725670][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.742141][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.752811][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.768949][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.781641][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.798591][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.814040][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.854652][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.867070][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875876][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.896760][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.938382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.953983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.969831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.981008][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.995554][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.005989][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.023371][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.034218][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.051134][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.062295][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.078120][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.093359][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.170056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.198275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.543068][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.696502][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.726790][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.735518][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.741692][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.748298][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 70.754363][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 70.765997][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.780171][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248975][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 71.311853][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318900][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.328955][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.329162][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.339898][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.358986][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.395024][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.524233][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.600798][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.905771][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.014611][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.232857][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.258784][ T4339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.290680][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.300566][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.398672][ T4342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.453254][ T4355] device syzkaller0 entered promiscuous mode [ 73.486967][ T4354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 73.493749][ T4354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.508750][ T4354] vhci_hcd vhci_hcd.0: Device attached [ 74.577254][ T21] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 74.585794][ T4246] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.394351][ T4342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.779027][ T4342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.876093][ T4342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.968755][ T4342] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.984073][ T4342] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.997021][ T4342] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006982][ T4246] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 76.011960][ T4342] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.016418][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.049513][ T4246] usb 5-1: Product: syz [ 76.059380][ T4246] usb 5-1: Manufacturer: syz [ 76.088128][ T4246] usb 5-1: SerialNumber: syz [ 77.096173][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 77.156914][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 77.176575][ T4356] vhci_hcd: connection reset by peer [ 77.212477][ T9] vhci_hcd: stop threads [ 77.217241][ T9] vhci_hcd: release socket [ 77.232874][ T9] vhci_hcd: disconnect device [ 77.436736][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 77.497705][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 78.037415][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 78.115400][ T4246] lan78xx: probe of 5-1:1.0 failed with error -71 [ 78.305943][ T4246] usb 5-1: USB disconnect, device number 2 [ 79.352804][ T4422] tipc: Started in network mode [ 79.366855][ T4422] tipc: Node identity 46a462a8e1d8, cluster identity 4711 [ 79.398749][ T4422] tipc: Enabled bearer , priority 0 [ 79.406456][ T4423] device syzkaller0 entered promiscuous mode [ 79.504958][ T4421] tipc: Resetting bearer [ 79.694412][ T4421] tipc: Disabling bearer [ 79.709121][ T4435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 79.715683][ T4435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.724921][ T4435] vhci_hcd vhci_hcd.0: Device attached [ 79.737620][ T4436] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 79.767820][ T370] vhci_hcd: stop threads [ 79.772139][ T370] vhci_hcd: release socket [ 79.796920][ T21] vhci_hcd: vhci_device speed not set [ 79.997115][ T4239] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 80.026717][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.136975][ T370] vhci_hcd: disconnect device [ 81.496921][ T4265] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 81.515370][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.524844][ T4265] usb 4-1: Product: syz [ 81.542268][ T4265] usb 4-1: Manufacturer: syz [ 81.641005][ T1111] cfg80211: failed to load regulatory.db [ 82.524988][ T4265] usb 4-1: SerialNumber: syz [ 82.736914][ T4265] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 82.943693][ T4477] tipc: Started in network mode [ 82.970702][ T4477] tipc: Node identity c2dbc826f887, cluster identity 4711 [ 83.218141][ T4477] tipc: Enabled bearer , priority 0 [ 83.465804][ T4479] device syzkaller0 entered promiscuous mode [ 83.606669][ T4265] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 83.666691][ T4265] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 83.696741][ T4265] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 83.723182][ T4265] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 84.237488][ T4252] tipc: Node number set to 979159078 [ 84.330862][ T4265] lan78xx: probe of 4-1:1.0 failed with error -71 [ 84.352089][ T4265] usb 4-1: USB disconnect, device number 2 [ 84.444725][ T4481] tipc: Resetting bearer [ 84.463674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.472740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 84.519991][ T4481] tipc: Disabling bearer [ 84.525813][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 84.545347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 84.559997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 85.746663][ T4239] vhci_hcd: vhci_device speed not set [ 89.070308][ T4545] device syzkaller0 entered promiscuous mode [ 90.806558][ C1] hrtimer: interrupt took 58042 ns [ 92.319294][ T4588] tipc: Started in network mode [ 92.359355][ T4588] tipc: Node identity a2e4577292a4, cluster identity 4711 [ 92.379392][ T4588] tipc: Enabled bearer , priority 0 [ 92.464009][ T4583] tipc: Disabling bearer [ 92.835164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.844589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 92.866551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.875515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.884481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.204733][ T4637] tipc: Enabled bearer , priority 0 [ 96.230670][ T4637] device syzkaller0 entered promiscuous mode [ 96.345969][ T4634] tipc: Resetting bearer [ 96.960276][ T4634] tipc: Disabling bearer [ 97.234878][ T4654] tipc: Started in network mode [ 97.243836][ T4654] tipc: Node identity 5aa0718c4a4e, cluster identity 4711 [ 97.272246][ T4654] tipc: Enabled bearer , priority 0 [ 97.310487][ T4654] device syzkaller0 entered promiscuous mode [ 97.499846][ T4654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 98.252935][ T4654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 98.268086][ T23] tipc: Node number set to 284062092 [ 98.325039][ T4660] tipc: Resetting bearer [ 98.499531][ T4653] tipc: Resetting bearer [ 98.548949][ T4653] tipc: Disabling bearer [ 99.057387][ T4676] syz.4.109 uses obsolete (PF_INET,SOCK_PACKET) [ 100.459977][ T4699] tipc: Enabled bearer , priority 0 [ 101.192011][ T4703] device syzkaller0 entered promiscuous mode [ 101.221029][ T4701] tipc: Enabled bearer , priority 0 [ 101.244949][ T4698] tipc: Resetting bearer [ 101.298260][ T4698] tipc: Disabling bearer [ 101.332780][ T4701] device syzkaller0 entered promiscuous mode [ 101.516330][ T4700] tipc: Resetting bearer [ 102.301582][ T4700] tipc: Disabling bearer [ 102.507467][ T4715] device batadv_slave_1 entered promiscuous mode [ 102.533139][ T4713] device batadv_slave_1 left promiscuous mode [ 107.134845][ T4758] tipc: Started in network mode [ 107.155627][ T4758] tipc: Node identity 62077eeb0f12, cluster identity 4711 [ 107.172387][ T4758] tipc: Enabled bearer , priority 0 [ 107.197997][ T4761] device syzkaller0 entered promiscuous mode [ 107.245449][ T4758] tipc: Resetting bearer [ 107.344388][ T4757] tipc: Resetting bearer [ 107.607186][ T4757] tipc: Disabling bearer [ 107.645762][ T4764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 107.652332][ T4764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.867198][ T4764] vhci_hcd vhci_hcd.0: Device attached [ 108.117067][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.136812][ T4317] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 108.156575][ T4239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.656598][ T4239] usb 2-1: device not accepting address 2, error -71 [ 108.727526][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.791509][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.896747][ T23] usb 5-1: Product: syz [ 108.939462][ T23] usb 5-1: Manufacturer: syz [ 108.978772][ T23] usb 5-1: SerialNumber: syz [ 109.009451][ T4781] tipc: Enabled bearer , priority 0 [ 109.087096][ T4781] device syzkaller0 entered promiscuous mode [ 109.145009][ T4780] tipc: Resetting bearer [ 109.213758][ T4780] tipc: Disabling bearer [ 109.796758][ T4767] vhci_hcd: connection reset by peer [ 109.827007][ T4334] vhci_hcd: stop threads [ 109.840482][ T4334] vhci_hcd: release socket [ 110.014250][ T4334] vhci_hcd: disconnect device [ 110.117281][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 110.179730][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 110.269055][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 110.294213][ T4793] device syzkaller0 entered promiscuous mode [ 110.329617][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.297933][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.308310][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 111.415995][ T23] usb 5-1: USB disconnect, device number 3 [ 112.569224][ T4826] tipc: Enabled bearer , priority 0 [ 112.579637][ T4826] device syzkaller0 entered promiscuous mode [ 112.590637][ T4825] tipc: Resetting bearer [ 112.631954][ T4825] tipc: Disabling bearer [ 113.756828][ T4317] vhci_hcd: vhci_device speed not set [ 116.453234][ T4884] tipc: Enabled bearer , priority 0 [ 116.472796][ T4884] tipc: Resetting bearer [ 116.498825][ T4883] tipc: Disabling bearer [ 118.206376][ T4903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.169'. [ 119.764170][ T4929] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.770746][ T4929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.786723][ T4929] vhci_hcd vhci_hcd.0: Device attached [ 119.825863][ T4930] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 119.838983][ T4322] vhci_hcd: stop threads [ 119.843271][ T4322] vhci_hcd: release socket [ 119.872764][ T4322] vhci_hcd: disconnect device [ 120.096826][ T4265] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.009615][ T4945] device syzkaller0 entered promiscuous mode [ 121.507785][ T4953] Zero length message leads to an empty skb [ 122.194030][ T4957] device syzkaller0 entered promiscuous mode [ 122.276934][ T4265] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.308718][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.342443][ T4265] usb 3-1: Product: syz [ 122.356563][ T4265] usb 3-1: Manufacturer: syz [ 122.361408][ T4265] usb 3-1: SerialNumber: syz [ 122.370194][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 122.469015][ T4968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'. [ 122.556416][ T4968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'. [ 122.876919][ T4265] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 123.049692][ T4265] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 123.271039][ T4265] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 123.355945][ T4265] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 123.446406][ T4265] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.492850][ T4265] lan78xx: probe of 3-1:1.0 failed with error -71 [ 123.516079][ T4265] usb 3-1: USB disconnect, device number 2 [ 124.508537][ T4986] device syzkaller0 entered promiscuous mode [ 124.836590][ T4265] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.106778][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 125.230296][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.334756][ T4265] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 125.414417][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.465090][ T4265] usb 3-1: config 0 descriptor?? [ 125.558531][ T4265] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 125.945199][ T5010] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 125.951850][ T5010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.985266][ T5010] vhci_hcd vhci_hcd.0: Device attached [ 126.116224][ T5017] device syzkaller0 entered promiscuous mode [ 126.256930][ T1111] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 126.287803][ T4246] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.877329][ T3547] bcm5974 3-1:0.0: could not read from device [ 126.926721][ T3547] bcm5974 3-1:0.0: could not read from device [ 127.093977][ T4265] usb 3-1: USB disconnect, device number 3 [ 127.136303][ T5029] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.151682][ T4246] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.160962][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.170790][ T4246] usb 2-1: Product: syz [ 127.175001][ T4246] usb 2-1: Manufacturer: syz [ 127.180430][ T4246] usb 2-1: SerialNumber: syz [ 128.184041][ T5011] vhci_hcd: connection reset by peer [ 128.190042][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 128.209342][ T9] vhci_hcd: stop threads [ 128.213629][ T9] vhci_hcd: release socket [ 128.223854][ T9] vhci_hcd: disconnect device [ 128.236796][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 128.286768][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 128.304540][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 128.327261][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 128.340733][ T4246] lan78xx: probe of 2-1:1.0 failed with error -71 [ 128.367464][ T4246] usb 2-1: USB disconnect, device number 4 [ 129.333857][ T5069] device syzkaller0 entered promiscuous mode [ 130.988392][ T5091] device syzkaller1 entered promiscuous mode [ 131.306939][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.506779][ T1111] vhci_hcd: vhci_device speed not set [ 131.896998][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.947826][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.012108][ T7] usb 5-1: Product: syz [ 132.050175][ T5107] device syzkaller0 entered promiscuous mode [ 132.057048][ T7] usb 5-1: Manufacturer: syz [ 132.072860][ T7] usb 5-1: SerialNumber: syz [ 132.334720][ T5118] device syzkaller0 entered promiscuous mode [ 132.598845][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 132.626807][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 132.656801][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 133.412798][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.419200][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.427856][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.442002][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.451055][ T7] lan78xx: probe of 5-1:1.0 failed with error -71 [ 133.487337][ T7] usb 5-1: USB disconnect, device number 4 [ 135.002066][ T5160] device syzkaller0 entered promiscuous mode [ 135.011541][ T5155] device syzkaller0 entered promiscuous mode [ 135.436740][ T1326] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.726824][ T1326] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 136.746209][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.774406][ T1326] usb 2-1: Product: syz [ 136.779265][ T1326] usb 2-1: Manufacturer: syz [ 136.784026][ T1326] usb 2-1: SerialNumber: syz [ 136.799309][ T5193] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 136.832545][ T5193] device bond1 entered promiscuous mode [ 136.838822][ T5193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.872349][ T5193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.887569][ T5193] device bond2 entered promiscuous mode [ 136.894165][ T5193] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 137.281844][ T1326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 137.326863][ T1326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 137.376756][ T1326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 137.405937][ T1326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 137.445703][ T1326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 137.472959][ T1326] lan78xx: probe of 2-1:1.0 failed with error -71 [ 137.500536][ T1326] usb 2-1: USB disconnect, device number 5 [ 137.561157][ T5206] device syzkaller0 entered promiscuous mode [ 141.111600][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 141.161961][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 146.327087][ T5341] tipc: Enabled bearer , priority 0 [ 146.373946][ T5341] tipc: Resetting bearer [ 146.433930][ T5339] tipc: Disabling bearer [ 149.726400][ T5387] tipc: Enabled bearer , priority 0 [ 149.799868][ T5387] tipc: Resetting bearer [ 149.818870][ T5386] tipc: Disabling bearer [ 151.478384][ T5407] device syzkaller0 entered promiscuous mode [ 151.758010][ T5410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.336'. [ 154.898985][ T5460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'. [ 155.201341][ T5467] device syzkaller0 entered promiscuous mode [ 155.907969][ T5480] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 155.977748][ T5479] tipc: Enabled bearer , priority 0 [ 156.006200][ T5477] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 156.034175][ T5479] tipc: Resetting bearer [ 156.104871][ T5478] tipc: Disabling bearer [ 156.120336][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 156.135443][ T5489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.362'. [ 156.166765][ T5489] netlink: set zone limit has 8 unknown bytes [ 156.242889][ T5490] bridge1: port 1(veth3) entered blocking state [ 156.262862][ T5490] bridge1: port 1(veth3) entered disabled state [ 156.287979][ T5490] device veth3 entered promiscuous mode [ 156.395665][ T5487] bridge1: port 2(veth0_to_bond) entered blocking state [ 156.432519][ T5487] bridge1: port 2(veth0_to_bond) entered disabled state [ 156.476634][ T5487] device veth0_to_bond entered promiscuous mode [ 157.369645][ T5512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.367'. [ 159.276958][ T5535] tipc: Enabled bearer , priority 0 [ 159.361762][ T5535] tipc: Resetting bearer [ 159.420275][ T5534] tipc: Disabling bearer [ 160.191409][ T5555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.380'. [ 160.906784][ T4246] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.427972][ T4246] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 161.442087][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.456955][ T4246] usb 4-1: Product: syz [ 161.467054][ T4246] usb 4-1: Manufacturer: syz [ 161.475570][ T4246] usb 4-1: SerialNumber: syz [ 161.966992][ T4246] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 162.009201][ T4246] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 162.066767][ T4246] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 162.074191][ T5588] tipc: Enabled bearer , priority 0 [ 162.086827][ T4246] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.116987][ T4246] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.123144][ T5588] tipc: Resetting bearer [ 162.125995][ T4246] lan78xx: probe of 4-1:1.0 failed with error -71 [ 162.196434][ T4246] usb 4-1: USB disconnect, device number 3 [ 162.240468][ T5587] tipc: Disabling bearer [ 162.363223][ T5591] device bpq0 entered promiscuous mode [ 163.810616][ T5607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.394'. [ 164.277279][ T5617] tipc: Enabled bearer , priority 0 [ 164.305436][ T5617] tipc: Resetting bearer [ 164.327874][ T5616] tipc: Disabling bearer [ 164.464380][ T5624] tipc: Enabling of bearer rejected, failed to enable media [ 164.787046][ T4184] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.429565][ T5657] device bpq0 left promiscuous mode [ 165.586722][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 165.931863][ T4184] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.941373][ T4184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.956057][ T4184] usb 3-1: Product: syz [ 165.960339][ T4184] usb 3-1: Manufacturer: syz [ 165.964955][ T4184] usb 3-1: SerialNumber: syz [ 166.186736][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 166.446943][ T4184] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 166.866910][ T4184] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 166.906916][ T4184] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 166.924611][ T4184] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 166.939215][ T4184] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 166.948126][ T4184] lan78xx: probe of 3-1:1.0 failed with error -71 [ 166.965841][ T4184] usb 3-1: USB disconnect, device number 4 [ 167.251261][ T5683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'. [ 167.393720][ T5685] tipc: Enabling of bearer rejected, failed to enable media [ 169.007144][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.606948][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.620602][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.663013][ T7] usb 5-1: Product: syz [ 169.695344][ T7] usb 5-1: Manufacturer: syz [ 169.733417][ T7] usb 5-1: SerialNumber: syz [ 169.783964][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 169.826792][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 169.846105][ T5737] netlink: 'syz.3.426': attribute type 20 has an invalid length. [ 169.912746][ T5737] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.922002][ T5737] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.930772][ T5737] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.939526][ T5737] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.969865][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 169.986092][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 170.005440][ T5737] netlink: 'syz.3.426': attribute type 20 has an invalid length. [ 170.109411][ T5740] tipc: Enabling of bearer rejected, failed to enable media [ 170.257920][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 170.306830][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 170.396865][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 170.456015][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 170.533049][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.545313][ T5756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 170.573505][ T7] lan78xx: probe of 5-1:1.0 failed with error -71 [ 170.616523][ T7] usb 5-1: USB disconnect, device number 5 [ 172.897714][ T5793] tipc: Enabling of bearer rejected, failed to enable media [ 173.043733][ T5798] device syzkaller0 entered promiscuous mode [ 173.551469][ T5817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.446'. [ 173.567701][ T1326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 174.377522][ T1326] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.454759][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.582252][ T1326] usb 1-1: Product: syz [ 174.588809][ T1326] usb 1-1: Manufacturer: syz [ 174.593437][ T1326] usb 1-1: SerialNumber: syz [ 175.107007][ T1326] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 175.227153][ T1326] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 175.377030][ T1326] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 175.471078][ T1326] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 175.614613][ T1326] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 175.699590][ T1326] lan78xx: probe of 1-1:1.0 failed with error -71 [ 175.811019][ T1326] usb 1-1: USB disconnect, device number 2 [ 175.820433][ T5841] tipc: Enabling of bearer rejected, failed to enable media [ 175.909737][ T5846] device syzkaller0 entered promiscuous mode [ 176.340878][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.459'. [ 177.626648][ T4252] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.177342][ T4252] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.220922][ T4252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.332336][ T4252] usb 2-1: Product: syz [ 178.389452][ T4252] usb 2-1: Manufacturer: syz [ 178.394145][ T4252] usb 2-1: SerialNumber: syz [ 178.460793][ T5890] tipc: Enabling of bearer rejected, failed to enable media [ 178.527368][ T5891] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 178.536610][ T5891] netlink: 224 bytes leftover after parsing attributes in process `syz.4.471'. [ 178.734732][ T5904] device syzkaller0 entered promiscuous mode [ 178.928864][ T4252] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 178.986887][ T4252] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 179.061667][ T4252] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 179.083774][ T4252] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.105348][ T4252] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.145111][ T4252] lan78xx: probe of 2-1:1.0 failed with error -71 [ 179.186100][ T4252] usb 2-1: USB disconnect, device number 6 [ 179.743215][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.476'. [ 181.631222][ T5941] tipc: Enabled bearer , priority 0 [ 181.680001][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 181.768616][ T5937] tipc: Disabling bearer [ 182.000552][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 182.067273][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 182.187190][ T5957] device bond3 entered promiscuous mode [ 182.216742][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 182.287896][ T5957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.126931][ T7] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 183.143927][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.372043][ T7] usb 1-1: Product: syz [ 183.376276][ T7] usb 1-1: Manufacturer: syz [ 183.406545][ T7] usb 1-1: SerialNumber: syz [ 184.696689][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 184.746964][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 184.856693][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 184.861698][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 184.893980][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 184.909881][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 184.936966][ T7] lan78xx: probe of 1-1:1.0 failed with error -71 [ 184.975604][ T7] usb 1-1: USB disconnect, device number 3 [ 186.742923][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 186.775161][ T6029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'. [ 187.184938][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 187.197517][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 187.213350][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 187.220006][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 188.796919][ T4252] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.037057][ T4252] usb 4-1: Using ep0 maxpacket: 16 [ 189.157144][ T4252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.216827][ T4252] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.266872][ T4252] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 189.276008][ T4252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.335218][ T4252] usb 4-1: config 0 descriptor?? [ 190.047344][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.642952][ T1111] usb 4-1: USB disconnect, device number 4 [ 191.009459][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.022845][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.037067][ T7] usb 2-1: Product: syz [ 191.041339][ T7] usb 2-1: Manufacturer: syz [ 191.046017][ T7] usb 2-1: SerialNumber: syz [ 192.056645][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 192.116967][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 192.133190][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 192.178458][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 192.223699][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 192.239740][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 192.252490][ T7] lan78xx: probe of 2-1:1.0 failed with error -71 [ 192.269535][ T7] usb 2-1: USB disconnect, device number 7 [ 194.811113][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.817502][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.126851][ T4265] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.543047][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 195.666840][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.686104][ T4265] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.726592][ T4265] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 195.735680][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.777629][ T4265] usb 4-1: config 0 descriptor?? [ 197.073068][ T4252] usb 4-1: USB disconnect, device number 5 [ 201.737050][ T4246] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.086915][ T4246] usb 4-1: Using ep0 maxpacket: 16 [ 202.252569][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.283212][ T4246] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.307186][ T4246] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 202.326753][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.377670][ T4246] usb 4-1: config 0 descriptor?? [ 203.676642][ T4247] usb 4-1: USB disconnect, device number 6 [ 209.642425][ T1326] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.098376][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.571'. [ 210.280709][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 210.405166][ T6264] tipc: Enabled bearer , priority 0 [ 210.418373][ T6264] device syzkaller0 entered promiscuous mode [ 210.476702][ T1326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.492220][ T1326] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 210.507729][ T6264] tipc: Resetting bearer [ 210.524099][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.537050][ T4246] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.552020][ T6263] tipc: Resetting bearer [ 210.592204][ T1326] usb 3-1: config 0 descriptor?? [ 210.633478][ T6263] tipc: Disabling bearer [ 210.663459][ T1326] usb 3-1: can't set config #0, error -71 [ 210.692861][ T1326] usb 3-1: USB disconnect, device number 5 [ 210.756106][ T6268] device syzkaller0 entered promiscuous mode [ 211.088091][ T4246] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.106787][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.128453][ T4246] usb 5-1: Product: syz [ 211.133885][ T4246] usb 5-1: Manufacturer: syz [ 211.145850][ T4246] usb 5-1: SerialNumber: syz [ 211.696645][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 211.756638][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 211.796616][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 211.815297][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.836807][ T4246] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.889601][ T4246] lan78xx: probe of 5-1:1.0 failed with error -71 [ 211.973058][ T4246] usb 5-1: USB disconnect, device number 6 [ 213.387306][ T4246] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.696962][ T4246] usb 2-1: Using ep0 maxpacket: 16 [ 213.827119][ T4246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.848205][ T4246] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 213.872806][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.914214][ T4246] usb 2-1: config 0 descriptor?? [ 213.985962][ T6315] netlink: 'syz.4.591': attribute type 21 has an invalid length. [ 214.011329][ T4246] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 214.021983][ T6319] "syz.0.593" (6319) uses obsolete ecb(arc4) skcipher [ 214.036009][ T6315] device ipvlan2 entered promiscuous mode [ 214.052980][ T6319] syz.0.593 sent an empty control message without MSG_MORE. [ 214.074199][ T6315] bridge0: port 3(ipvlan2) entered blocking state [ 214.083419][ T6315] bridge0: port 3(ipvlan2) entered disabled state [ 214.159566][ T6323] netlink: 'syz.2.595': attribute type 2 has an invalid length. [ 214.180158][ T6323] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.595'. [ 216.007681][ T3547] bcm5974 2-1:0.0: could not read from device [ 216.396801][ T3547] bcm5974 2-1:0.0: could not read from device [ 216.526753][ T4246] bcm5974 2-1:0.0: could not read from device [ 216.622620][ T4246] input: failed to attach handler mousedev to device input32, error: -5 [ 216.657362][ T6356] netlink: set zone limit has 8 unknown bytes [ 216.686683][ T3547] bcm5974 2-1:0.0: could not read from device [ 216.700387][ T4246] usb 2-1: USB disconnect, device number 8 [ 216.709604][ T6356] tipc: Failed to remove unknown binding: 66,1,1/284062092:3719460745/3719460747 [ 216.762903][ T6356] tipc: Failed to remove unknown binding: 66,1,1/284062092:3719460745/3719460747 [ 216.812144][ T6356] tipc: Failed to remove unknown binding: 66,1,1/284062092:3719460745/3719460747 [ 216.843425][ T6363] device syzkaller0 entered promiscuous mode [ 216.851329][ T6356] netlink: 788 bytes leftover after parsing attributes in process `syz.4.605'. [ 217.013220][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 218.531346][ T6405] device syzkaller0 entered promiscuous mode [ 220.820410][ T6461] device syzkaller0 entered promiscuous mode [ 221.424970][ T6478] netlink: 'syz.3.645': attribute type 7 has an invalid length. [ 221.443065][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 221.526748][ T6482] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 221.590345][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.728211][ T6484] bond1: (slave bridge1): making interface the new active one [ 221.758877][ T6484] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 221.821475][ T6485] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 221.883602][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 222.703202][ T6520] netlink: set zone limit has 8 unknown bytes [ 223.182214][ T6537] tipc: Enabled bearer , priority 0 [ 223.189855][ T6537] device syzkaller0 entered promiscuous mode [ 223.211911][ T6537] tipc: Resetting bearer [ 223.231207][ T6533] tipc: Resetting bearer [ 223.258583][ T6533] tipc: Disabling bearer [ 225.064692][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.073375][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.759831][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.789032][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.456022][ T6552] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.465326][ T6552] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.474768][ T6552] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.484190][ T6552] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.636262][ T6552] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.645333][ T6552] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.654291][ T6552] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.663216][ T6552] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.782005][ T6585] device syzkaller0 entered promiscuous mode [ 226.845426][ T6590] ksmbd: Unknown IPC event: 6, ignore. [ 227.880561][ T6612] tipc: Enabled bearer , priority 0 [ 228.000864][ T6612] device syzkaller0 entered promiscuous mode [ 228.067343][ T6612] tipc: Resetting bearer [ 228.114520][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 228.181313][ T6609] tipc: Resetting bearer [ 228.211297][ T6609] tipc: Disabling bearer [ 228.610775][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 228.630782][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 228.779042][ T6639] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.703'. [ 229.045750][ T6647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.510069][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.708'. [ 231.588261][ T6684] tipc: Enabling of bearer rejected, failed to enable media [ 231.997515][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.347795][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 232.467028][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.510389][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 232.556511][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.597774][ T23] usb 5-1: config 0 descriptor?? [ 232.816484][ T23] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 233.833600][ T6722] tipc: Enabled bearer , priority 0 [ 233.859670][ T6722] device syzkaller0 entered promiscuous mode [ 233.882019][ T6722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.904585][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 233.921302][ T6721] tipc: Resetting bearer [ 233.951455][ T6721] tipc: Disabling bearer [ 233.963704][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 234.286019][ T6736] tipc: Enabling of bearer rejected, failed to enable media [ 234.396731][ T3547] bcm5974 5-1:0.0: could not read from device [ 234.446553][ T23] bcm5974 5-1:0.0: could not read from device [ 234.718827][ T23] input: failed to attach handler mousedev to device input38, error: -5 [ 234.731159][ T23] usb 5-1: USB disconnect, device number 7 [ 234.748505][ T3547] bcm5974 5-1:0.0: could not read from device [ 235.506678][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.651837][ T6769] device syzkaller0 entered promiscuous mode [ 235.807787][ T6778] tipc: Enabling of bearer rejected, failed to enable media [ 236.026712][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 236.056332][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.071617][ T13] usb 2-1: Product: syz [ 236.075859][ T13] usb 2-1: Manufacturer: syz [ 236.090881][ T13] usb 2-1: SerialNumber: syz [ 236.255845][ T6795] tipc: Enabled bearer , priority 0 [ 236.266678][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 236.304818][ T6795] tipc: Resetting bearer [ 236.346285][ T6794] tipc: Disabling bearer [ 236.381762][ T13] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 236.426679][ T13] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 236.466702][ T13] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 236.491328][ T13] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 236.517949][ T13] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.536185][ T13] lan78xx: probe of 2-1:1.0 failed with error -71 [ 236.569054][ T13] usb 2-1: USB disconnect, device number 9 [ 238.122363][ T6818] tipc: Enabling of bearer rejected, failed to enable media [ 238.241806][ T6816] device syzkaller0 entered promiscuous mode [ 239.478063][ T6851] netlink: 'syz.3.764': attribute type 7 has an invalid length. [ 239.521795][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 241.320356][ T6866] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 241.591736][ T6874] device syzkaller0 entered promiscuous mode [ 241.648161][ T6882] tipc: Enabling of bearer rejected, failed to enable media [ 241.865460][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 241.887365][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 241.935313][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 242.194833][ T6887] device team_slave_0 entered promiscuous mode [ 242.201371][ T6887] device team_slave_1 entered promiscuous mode [ 242.332383][ T6887] device macsec1 entered promiscuous mode [ 242.366637][ T6887] device team0 entered promiscuous mode [ 242.711862][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.849211][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 242.992067][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 243.066118][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 243.126113][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 243.743806][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 243.769551][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 244.224242][ T6930] tipc: Enabling of bearer rejected, failed to enable media [ 245.068474][ T6964] netlink: 5844 bytes leftover after parsing attributes in process `syz.1.795'. [ 245.479130][ T6964] netlink: set zone limit has 8 unknown bytes [ 245.516270][ T6966] tipc: Enabled bearer , priority 0 [ 245.539281][ T6966] device syzkaller0 entered promiscuous mode [ 245.629146][ T6966] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.697891][ T6966] tipc: Resetting bearer [ 245.705368][ T6959] tipc: Resetting bearer [ 245.793765][ T6959] tipc: Disabling bearer [ 245.838270][ T6977] device syzkaller0 entered promiscuous mode [ 245.985908][ T6989] tipc: Enabled bearer , priority 0 [ 246.023892][ T6987] tipc: Resetting bearer [ 246.062319][ T6985] tipc: Disabling bearer [ 246.527499][ T4239] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.693289][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'. [ 247.495396][ T7020] tipc: Enabled bearer , priority 0 [ 247.517830][ T7020] device syzkaller0 entered promiscuous mode [ 247.535957][ T7020] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.580626][ T7020] tipc: Resetting bearer [ 247.600375][ T7019] tipc: Resetting bearer [ 247.620866][ T7019] tipc: Disabling bearer [ 247.769950][ T7034] tipc: Enabled bearer , priority 0 [ 247.792466][ T7034] tipc: Resetting bearer [ 247.804793][ T7033] tipc: Disabling bearer [ 247.908844][ T4239] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.923656][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.937437][ T4239] usb 5-1: Product: syz [ 247.943421][ T4239] usb 5-1: Manufacturer: syz [ 247.951259][ T4239] usb 5-1: SerialNumber: syz [ 248.516649][ T4239] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 248.806768][ T4239] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 248.820626][ T4239] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.842102][ T4239] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 248.853678][ T4239] lan78xx: probe of 5-1:1.0 failed with error -71 [ 248.866715][ T4239] usb 5-1: USB disconnect, device number 8 [ 249.071628][ T7057] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 249.155373][ T7063] tipc: Enabled bearer , priority 0 [ 249.270556][ T7063] tipc: Resetting bearer [ 249.354839][ T7062] tipc: Disabling bearer [ 251.473670][ T7116] sctp: failed to load transform for md5: -2 [ 251.612910][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.853'. [ 252.393095][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 253.096876][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 253.126371][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.182636][ T23] usb 4-1: Product: syz [ 253.192462][ T23] usb 4-1: Manufacturer: syz [ 253.199316][ T23] usb 4-1: SerialNumber: syz [ 253.406697][ T4247] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.676995][ T4247] usb 1-1: Using ep0 maxpacket: 16 [ 253.817877][ T4247] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 253.943249][ T4247] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 254.127650][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.230072][ T4247] usb 1-1: config 0 descriptor?? [ 254.260763][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 254.287264][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 254.328637][ T4247] usb 1-1: can't set config #0, error -71 [ 254.349872][ T4247] usb 1-1: USB disconnect, device number 4 [ 254.376868][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 254.545491][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 254.555814][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 254.565620][ T23] lan78xx: probe of 4-1:1.0 failed with error -71 [ 254.583892][ T23] usb 4-1: USB disconnect, device number 7 [ 254.777929][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.865'. [ 255.427063][ T7182] device syzkaller0 entered promiscuous mode [ 255.487042][ T7185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.626932][ C1] ================================================================== [ 255.629619][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.635387][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 255.644917][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.649113][ C1] Read of size 2 at addr ffff88805d05482a by task syz.0.877/7187 [ 255.649132][ C1] [ 255.649149][ C1] CPU: 1 PID: 7187 Comm: syz.0.877 Not tainted 5.15.189-syzkaller #0 [ 255.649186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.683596][ C1] Call Trace: [ 255.686895][ C1] [ 255.689762][ C1] dump_stack_lvl+0x168/0x230 [ 255.694474][ C1] ? show_regs_print_info+0x20/0x20 [ 255.699700][ C1] ? _printk+0xcc/0x110 [ 255.703882][ C1] ? rose_timer_expiry+0x470/0x490 [ 255.709022][ C1] ? load_image+0x3b0/0x3b0 [ 255.713560][ C1] print_address_description+0x60/0x2d0 [ 255.719138][ C1] ? rose_timer_expiry+0x470/0x490 [ 255.724292][ C1] kasan_report+0xdf/0x130 [ 255.728736][ C1] ? rose_timer_expiry+0x470/0x490 [ 255.733961][ C1] rose_timer_expiry+0x470/0x490 [ 255.738921][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 255.743967][ C1] call_timer_fn+0x16c/0x530 [ 255.748587][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 255.753634][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 255.759636][ C1] ? __run_timers+0x7c0/0x7c0 [ 255.764345][ C1] ? rcu_is_watching+0x11/0xa0 [ 255.769133][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 255.774375][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 255.779611][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 255.784682][ C1] __run_timers+0x525/0x7c0 [ 255.789232][ C1] ? detach_timer+0x2b0/0x2b0 [ 255.793933][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 255.799939][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 255.804813][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 255.810131][ C1] run_timer_softirq+0x63/0xf0 [ 255.814919][ C1] handle_softirqs+0x328/0x820 [ 255.819711][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 255.824588][ C1] ? do_softirq+0x200/0x200 [ 255.829112][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 255.834354][ C1] __irq_exit_rcu+0x12f/0x220 [ 255.839052][ C1] ? irq_exit_rcu+0x20/0x20 [ 255.843587][ C1] irq_exit_rcu+0x5/0x20 [ 255.847847][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 255.853503][ C1] [ 255.856445][ C1] [ 255.859400][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 255.865556][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 255.870873][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 255.890497][ C1] RSP: 0018:ffffc9000349f620 EFLAGS: 00000206 [ 255.896603][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0e43c46d9d62a00 [ 255.904586][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 255.912581][ C1] RBP: ffffc9000349f738 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 255.920570][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffff88807daf8558 [ 255.928564][ C1] R13: 1ffff92000693ed0 R14: 0000000000000246 R15: dffffc0000000000 [ 255.936577][ C1] ? read_lock_is_recursive+0x10/0x10 [ 255.941978][ C1] ? xas_reload+0x281/0x470 [ 255.946504][ C1] ? next_uptodate_page+0x836/0x8b0 [ 255.951732][ C1] _raw_spin_lock+0x2a/0x40 [ 255.956256][ C1] ? filemap_map_pages+0xb7d/0x1390 [ 255.961475][ C1] filemap_map_pages+0xb7d/0x1390 [ 255.966558][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 255.971696][ C1] ? count_memcg_event_mm+0x311/0x360 [ 255.977100][ C1] ? follow_page_pte+0x320/0xc20 [ 255.982066][ C1] handle_mm_fault+0x2580/0x43c0 [ 255.987047][ C1] ? get_page+0xe0/0xe0 [ 255.991327][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 255.996489][ C1] __get_user_pages+0x93e/0x11c0 [ 256.001485][ C1] ? populate_vma_page_range+0x290/0x290 [ 256.007141][ C1] ? read_lock_is_recursive+0x10/0x10 [ 256.012557][ C1] populate_vma_page_range+0x213/0x290 [ 256.018045][ C1] __mm_populate+0x26f/0x3a0 [ 256.022665][ C1] ? check_vma_flags+0x480/0x480 [ 256.027623][ C1] ? preempt_count_add+0x8d/0x190 [ 256.032671][ C1] ? up_write+0x1bb/0x420 [ 256.037020][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 256.041640][ C1] ? account_locked_vm+0xe0/0xe0 [ 256.046614][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 256.051686][ C1] ksys_mmap_pgoff+0x140/0x780 [ 256.056480][ C1] ? mmap_region+0x15e0/0x15e0 [ 256.061268][ C1] ? syscall_user_dispatch+0x45/0x90 [ 256.066584][ C1] do_syscall_64+0x4c/0xa0 [ 256.071019][ C1] ? clear_bhb_loop+0x30/0x80 [ 256.075712][ C1] ? clear_bhb_loop+0x30/0x80 [ 256.080443][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.086361][ C1] RIP: 0033:0x7fa2ff9cbbe9 [ 256.090827][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.110451][ C1] RSP: 002b:00007fa2fdc33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 256.118897][ C1] RAX: ffffffffffffffda RBX: 00007fa2ffbf2fa0 RCX: 00007fa2ff9cbbe9 [ 256.127042][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 256.135045][ C1] RBP: 00007fa2ffa4ee19 R08: ffffffffffffffff R09: 0000000000000000 [ 256.143122][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 256.151119][ C1] R13: 00007fa2ffbf3038 R14: 00007fa2ffbf2fa0 R15: 00007ffc678505f8 [ 256.159128][ C1] [ 256.162176][ C1] [ 256.164523][ C1] Allocated by task 4175: [ 256.168870][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 256.173740][ C1] slab_post_alloc_hook+0x4c/0x380 [ 256.178883][ C1] kmem_cache_alloc+0x100/0x290 [ 256.183747][ C1] __alloc_file+0x25/0x240 [ 256.188184][ C1] alloc_empty_file+0x90/0x180 [ 256.192971][ C1] path_openat+0xfc/0x2f30 [ 256.197405][ C1] do_filp_open+0x1b3/0x3e0 [ 256.201923][ C1] do_sys_openat2+0x142/0x4a0 [ 256.206618][ C1] __x64_sys_openat+0x135/0x160 [ 256.211490][ C1] do_syscall_64+0x4c/0xa0 [ 256.215925][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.221840][ C1] [ 256.224171][ C1] Freed by task 14: [ 256.227991][ C1] kasan_set_track+0x4b/0x70 [ 256.232608][ C1] kasan_set_free_info+0x1f/0x40 [ 256.237568][ C1] ____kasan_slab_free+0xd5/0x110 [ 256.242614][ C1] slab_free_freelist_hook+0xea/0x170 [ 256.247999][ C1] kmem_cache_free+0x8f/0x210 [ 256.252698][ C1] rcu_core+0x962/0x15d0 [ 256.256949][ C1] handle_softirqs+0x328/0x820 [ 256.261715][ C1] run_ksoftirqd+0x98/0xf0 [ 256.266127][ C1] smpboot_thread_fn+0x4f6/0x970 [ 256.271074][ C1] kthread+0x436/0x520 [ 256.275143][ C1] ret_from_fork+0x1f/0x30 [ 256.279562][ C1] [ 256.281885][ C1] Last potentially related work creation: [ 256.287592][ C1] kasan_save_stack+0x35/0x60 [ 256.292266][ C1] kasan_record_aux_stack+0xb8/0x100 [ 256.297549][ C1] call_rcu+0x182/0x930 [ 256.301701][ C1] task_work_run+0x125/0x1a0 [ 256.306284][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 256.311656][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 256.317204][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 256.322663][ C1] do_syscall_64+0x58/0xa0 [ 256.327083][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.332977][ C1] [ 256.335295][ C1] Second to last potentially related work creation: [ 256.341875][ C1] kasan_save_stack+0x35/0x60 [ 256.346551][ C1] kasan_record_aux_stack+0xb8/0x100 [ 256.351833][ C1] task_work_add+0x2f/0x1d0 [ 256.356327][ C1] fput_many+0xde/0x1a0 [ 256.360493][ C1] path_openat+0x2974/0x2f30 [ 256.365079][ C1] do_filp_open+0x1b3/0x3e0 [ 256.369574][ C1] do_sys_openat2+0x142/0x4a0 [ 256.374248][ C1] __x64_sys_openat+0x135/0x160 [ 256.379089][ C1] do_syscall_64+0x4c/0xa0 [ 256.383501][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.389398][ C1] [ 256.391740][ C1] The buggy address belongs to the object at ffff88805d054780 [ 256.391740][ C1] which belongs to the cache filp of size 464 [ 256.405178][ C1] The buggy address is located 170 bytes inside of [ 256.405178][ C1] 464-byte region [ffff88805d054780, ffff88805d054950) [ 256.418536][ C1] The buggy address belongs to the page: [ 256.424158][ C1] page:ffffea0001741500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d054 [ 256.434397][ C1] head:ffffea0001741500 order:1 compound_mapcount:0 [ 256.440982][ C1] memcg:ffff88807e083981 [ 256.445210][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 256.453187][ C1] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8880169e98c0 [ 256.461762][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff ffff88807e083981 [ 256.470337][ C1] page dumped because: kasan: bad access detected [ 256.476764][ C1] page_owner tracks the page as allocated [ 256.482487][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4175, ts 249204249852, free_ts 246201536154 [ 256.503144][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 256.508690][ C1] __alloc_pages+0x1e1/0x470 [ 256.513274][ C1] new_slab+0xc0/0x4b0 [ 256.517342][ C1] ___slab_alloc+0x81e/0xdf0 [ 256.521923][ C1] kmem_cache_alloc+0x195/0x290 [ 256.526770][ C1] __alloc_file+0x25/0x240 [ 256.531181][ C1] alloc_empty_file+0x90/0x180 [ 256.535939][ C1] path_openat+0xfc/0x2f30 [ 256.540347][ C1] do_filp_open+0x1b3/0x3e0 [ 256.544853][ C1] do_sys_openat2+0x142/0x4a0 [ 256.549534][ C1] __x64_sys_openat+0x135/0x160 [ 256.554381][ C1] do_syscall_64+0x4c/0xa0 [ 256.558794][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.564709][ C1] page last free stack trace: [ 256.569373][ C1] free_unref_page_prepare+0x637/0x6c0 [ 256.574836][ C1] free_unref_page+0x94/0x280 [ 256.579509][ C1] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 256.585228][ C1] __apply_to_page_range+0x95c/0xc80 [ 256.590511][ C1] kasan_release_vmalloc+0x93/0xb0 [ 256.595629][ C1] __purge_vmap_area_lazy+0xc6e/0x18f0 [ 256.601093][ C1] _vm_unmap_aliases+0x410/0x4a0 [ 256.606028][ C1] change_page_attr_set_clr+0x311/0xc10 [ 256.611570][ C1] set_memory_ro+0x89/0xd0 [ 256.615980][ C1] bpf_int_jit_compile+0xc4a8/0xcc80 [ 256.621260][ C1] bpf_prog_select_runtime+0x74f/0xaa0 [ 256.626714][ C1] bpf_prepare_filter+0x1014/0x11c0 [ 256.631913][ C1] sk_attach_filter+0x20/0x140 [ 256.636675][ C1] sock_setsockopt+0x14f3/0x2270 [ 256.641615][ C1] __sys_setsockopt+0x2f6/0x3d0 [ 256.646463][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 256.651486][ C1] [ 256.653805][ C1] Memory state around the buggy address: [ 256.659425][ C1] ffff88805d054700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.667484][ C1] ffff88805d054780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.675538][ C1] >ffff88805d054800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.683592][ C1] ^ [ 256.688958][ C1] ffff88805d054880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.697015][ C1] ffff88805d054900: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 256.705067][ C1] ================================================================== [ 256.713117][ C1] Disabling lock debugging due to kernel taint [ 256.719335][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.726546][ C1] CPU: 1 PID: 7187 Comm: syz.0.877 Tainted: G B 5.15.189-syzkaller #0 [ 256.736025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.746096][ C1] Call Trace: [ 256.749385][ C1] [ 256.752237][ C1] dump_stack_lvl+0x168/0x230 [ 256.756918][ C1] ? show_regs_print_info+0x20/0x20 [ 256.762117][ C1] ? load_image+0x3b0/0x3b0 [ 256.766625][ C1] panic+0x2c9/0x7f0 [ 256.770527][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 256.775036][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 256.780929][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 256.786850][ C1] ? _raw_spin_unlock+0x40/0x40 [ 256.791698][ C1] ? print_memory_metadata+0x314/0x400 [ 256.797155][ C1] ? rose_timer_expiry+0x470/0x490 [ 256.802263][ C1] check_panic_on_warn+0x80/0xa0 [ 256.807199][ C1] ? rose_timer_expiry+0x470/0x490 [ 256.812307][ C1] end_report+0x6d/0xf0 [ 256.816461][ C1] kasan_report+0x102/0x130 [ 256.820960][ C1] ? rose_timer_expiry+0x470/0x490 [ 256.826069][ C1] rose_timer_expiry+0x470/0x490 [ 256.831023][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 256.836062][ C1] call_timer_fn+0x16c/0x530 [ 256.840652][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 256.845671][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 256.851651][ C1] ? __run_timers+0x7c0/0x7c0 [ 256.856345][ C1] ? rcu_is_watching+0x11/0xa0 [ 256.861120][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 256.866311][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 256.871504][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 256.876536][ C1] __run_timers+0x525/0x7c0 [ 256.881039][ C1] ? detach_timer+0x2b0/0x2b0 [ 256.885708][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 256.891679][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 256.896541][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 256.901827][ C1] run_timer_softirq+0x63/0xf0 [ 256.906587][ C1] handle_softirqs+0x328/0x820 [ 256.911344][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 256.916193][ C1] ? do_softirq+0x200/0x200 [ 256.920694][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 256.925891][ C1] __irq_exit_rcu+0x12f/0x220 [ 256.930564][ C1] ? irq_exit_rcu+0x20/0x20 [ 256.935058][ C1] irq_exit_rcu+0x5/0x20 [ 256.939289][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 256.944916][ C1] [ 256.947839][ C1] [ 256.950760][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 256.956731][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 256.962011][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 256.981607][ C1] RSP: 0018:ffffc9000349f620 EFLAGS: 00000206 [ 256.987692][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0e43c46d9d62a00 [ 256.995658][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 257.003620][ C1] RBP: ffffc9000349f738 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 257.011587][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffff88807daf8558 [ 257.019553][ C1] R13: 1ffff92000693ed0 R14: 0000000000000246 R15: dffffc0000000000 [ 257.027534][ C1] ? read_lock_is_recursive+0x10/0x10 [ 257.032906][ C1] ? xas_reload+0x281/0x470 [ 257.037403][ C1] ? next_uptodate_page+0x836/0x8b0 [ 257.042594][ C1] _raw_spin_lock+0x2a/0x40 [ 257.047089][ C1] ? filemap_map_pages+0xb7d/0x1390 [ 257.052277][ C1] filemap_map_pages+0xb7d/0x1390 [ 257.057305][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 257.062404][ C1] ? count_memcg_event_mm+0x311/0x360 [ 257.067771][ C1] ? follow_page_pte+0x320/0xc20 [ 257.072711][ C1] handle_mm_fault+0x2580/0x43c0 [ 257.077649][ C1] ? get_page+0xe0/0xe0 [ 257.081806][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 257.086927][ C1] __get_user_pages+0x93e/0x11c0 [ 257.091896][ C1] ? populate_vma_page_range+0x290/0x290 [ 257.097550][ C1] ? read_lock_is_recursive+0x10/0x10 [ 257.102922][ C1] populate_vma_page_range+0x213/0x290 [ 257.108376][ C1] __mm_populate+0x26f/0x3a0 [ 257.112970][ C1] ? check_vma_flags+0x480/0x480 [ 257.117899][ C1] ? preempt_count_add+0x8d/0x190 [ 257.122918][ C1] ? up_write+0x1bb/0x420 [ 257.127280][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 257.131869][ C1] ? account_locked_vm+0xe0/0xe0 [ 257.136801][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 257.141821][ C1] ksys_mmap_pgoff+0x140/0x780 [ 257.146582][ C1] ? mmap_region+0x15e0/0x15e0 [ 257.151341][ C1] ? syscall_user_dispatch+0x45/0x90 [ 257.156814][ C1] do_syscall_64+0x4c/0xa0 [ 257.161244][ C1] ? clear_bhb_loop+0x30/0x80 [ 257.165922][ C1] ? clear_bhb_loop+0x30/0x80 [ 257.170601][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.176506][ C1] RIP: 0033:0x7fa2ff9cbbe9 [ 257.180913][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.200509][ C1] RSP: 002b:00007fa2fdc33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 257.208922][ C1] RAX: ffffffffffffffda RBX: 00007fa2ffbf2fa0 RCX: 00007fa2ff9cbbe9 [ 257.216889][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 257.224987][ C1] RBP: 00007fa2ffa4ee19 R08: ffffffffffffffff R09: 0000000000000000 [ 257.232947][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 257.240906][ C1] R13: 00007fa2ffbf3038 R14: 00007fa2ffbf2fa0 R15: 00007ffc678505f8 [ 257.248874][ C1] [ 257.252220][ C1] Kernel Offset: disabled [ 257.256563][ C1] Rebooting in 86400 seconds..