last executing test programs: 13.533273732s ago: executing program 0 (id=1): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)=ANY=[], 0x12) 13.193073079s ago: executing program 0 (id=6): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x12, 0x0, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000300)="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", 0x5c2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc044) r5 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000440)=0x4, 0x4) personality(0x400000) 10.854147044s ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 10.761484829s ago: executing program 2 (id=9): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) read(r3, &(0x7f0000000040)=""/127, 0x7f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.594596107s ago: executing program 4 (id=13): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x8080) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 6.622502763s ago: executing program 4 (id=18): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59540000000fcffffff0a010900", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000300000001f020ff060000000000000014000100fe8000"/57], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 6.495669299s ago: executing program 4 (id=21): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 6.387901184s ago: executing program 1 (id=24): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) close(0x3) 4.86395713s ago: executing program 4 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 4.830173992s ago: executing program 1 (id=26): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x100fc53, 0x10100, 0x10000, 0x2000000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000840)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x40}], 0x0, 0x0, 0x0}) 3.856047679s ago: executing program 2 (id=27): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/219, 0xdb) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='source', 0x0, r4) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) tkill(r5, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x14) 3.84948782s ago: executing program 1 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000020001a800c000a80050008"], 0x48}}, 0x0) 3.736072035s ago: executing program 1 (id=29): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x8080) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 3.597190942s ago: executing program 2 (id=30): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x3ff, &(0x7f0000000200)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f00000002c0)=0xdfb, 0x4) syz_emit_ethernet(0x36b, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2e86dd6100272403353afffc000000000000000000000000000001ff020000000000000000000000000001"], 0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f00000002c0)='\vG', 0x2}]) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') pselect6(0x40, &(0x7f0000000280)={0x4, 0x5, 0x7, 0xc770, 0xb4c0, 0x64f5, 0x5a, 0x7}, &(0x7f0000000300)={0x67, 0x10001, 0x8, 0x10000, 0x200, 0x9, 0x763d8f4, 0x3e35d9c}, &(0x7f0000000380)={0x4, 0x8001, 0xe5, 0x6, 0x100, 0x6, 0xa}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x5]}, 0x8}) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) 3.593959523s ago: executing program 3 (id=42): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/219, 0xdb) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='source', 0x0, r4) 3.105764727s ago: executing program 4 (id=32): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0x1, 0x4000}, 0xc) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ftruncate(r0, 0x10000) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) 3.081452258s ago: executing program 3 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.010072161s ago: executing program 3 (id=34): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3.009065931s ago: executing program 3 (id=35): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x1, 0x20, 0x8, [0x3, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 2.943987635s ago: executing program 3 (id=36): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) gettid() mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_triestat\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) read$hiddev(r4, &(0x7f0000000300)=""/84, 0x54) getrandom(0x0, 0x0, 0x0) getgroups(0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 247.417137ms ago: executing program 2 (id=37): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffbff, 0x5}}]}}]}, 0x48}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000ff1100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 235.639318ms ago: executing program 1 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x680200, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) unshare(0x40600) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000000500000a05000100070000004215e51369ab65d2faf558fe23ca802550"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000020000000000c000c800800058004"], 0x2c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) 199.9973ms ago: executing program 3 (id=40): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) read(r3, &(0x7f0000000040)=""/127, 0x7f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 87.182085ms ago: executing program 4 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) 0s ago: executing program 1 (id=43): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f00000025c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 29.461177][ T4309] cgroup: Unknown subsys name 'net' [ 29.682591][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.992752][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.245163][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.255554][ T4327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.256863][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.258087][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.260194][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.261816][ T4327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.262717][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.263221][ T4327] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.264633][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.265645][ T4327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.266967][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.275407][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.277418][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.277569][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.280313][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.287667][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.288950][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.290420][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.292884][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.294165][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.295895][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.297046][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.298177][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.300742][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.306871][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.308499][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.310203][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.310467][ T4327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.312672][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.312681][ T4327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.401043][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.448076][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.462029][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.463191][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.465066][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.467420][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.468613][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.470541][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.485790][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.488298][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.495260][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.502857][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.527454][ T4331] team0: Port device team_slave_0 added [ 31.537414][ T4331] team0: Port device team_slave_1 added [ 31.542012][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.543177][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.544712][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.546727][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 31.557579][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.558766][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.560298][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.563314][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.564471][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.566031][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.567976][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.569119][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.573595][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.577796][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.578825][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.583205][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.588746][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.590842][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.592239][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.600623][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.607866][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.617158][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.618310][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.619787][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.661143][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.700223][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.741963][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.744409][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.752672][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.753903][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.755496][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.763962][ T4326] team0: Port device team_slave_0 added [ 31.771934][ T4321] team0: Port device team_slave_0 added [ 31.773742][ T4326] team0: Port device team_slave_1 added [ 31.783059][ T4321] team0: Port device team_slave_1 added [ 31.786100][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.787216][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.789248][ T4322] device bridge_slave_0 entered promiscuous mode [ 31.792589][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.799504][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.802781][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.804463][ T4322] device bridge_slave_1 entered promiscuous mode [ 31.806779][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.812240][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.813275][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.817609][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.827011][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.828125][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.833185][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.835478][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.836704][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.840960][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.844341][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.849769][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.851297][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.855507][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.859657][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.862351][ T4332] team0: Port device team_slave_0 added [ 31.870299][ T4332] team0: Port device team_slave_1 added [ 31.921787][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.960033][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.009903][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.011203][ T4326] Cannot create hsr debugfs directory [ 32.013094][ T4322] team0: Port device team_slave_0 added [ 32.015501][ T4322] team0: Port device team_slave_1 added [ 32.031333][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.032396][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.035998][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.081061][ T4321] device hsr_slave_0 entered promiscuous mode [ 32.120084][ T4321] device hsr_slave_1 entered promiscuous mode [ 32.169995][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.171260][ T4321] Cannot create hsr debugfs directory [ 32.172488][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.173620][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.177863][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.182409][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.183477][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.187942][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.192744][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.195322][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.199513][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.281144][ T4332] device hsr_slave_0 entered promiscuous mode [ 32.320118][ T4332] device hsr_slave_1 entered promiscuous mode [ 32.359902][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.361046][ T4332] Cannot create hsr debugfs directory [ 32.400953][ T4322] device hsr_slave_0 entered promiscuous mode [ 32.440063][ T4322] device hsr_slave_1 entered promiscuous mode [ 32.489898][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.491148][ T4322] Cannot create hsr debugfs directory [ 32.536226][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.575399][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.641013][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.682304][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.751225][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.798400][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.841818][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.890937][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.959824][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.003759][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.057094][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.093625][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.137646][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.139733][ T4322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.191996][ T4322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.231263][ T4322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.281458][ T4322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.310032][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 33.311143][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 33.336676][ T4332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.379885][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 33.380982][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 33.383856][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.388600][ T4332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.392723][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 33.442102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.443841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.445375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.447054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.449106][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.450334][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.452910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.454520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.456178][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.457450][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.459094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.466695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.468802][ T4332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.524120][ T4332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.587505][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.589156][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.591605][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.593166][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.603748][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.605440][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.608128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.609657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.615458][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.624714][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.626806][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.630644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.632133][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.636641][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.645393][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.646989][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.655578][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.663822][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.665395][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.666783][ T245] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.667947][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.669372][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.674870][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.676396][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.677837][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.679046][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.690564][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.693330][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.694655][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.703786][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.705935][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.710740][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.715761][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.717847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.719168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.721478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.723085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.724563][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.725690][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.730364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.737467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.739001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.742214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.749268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.751161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.752788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.754275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.755823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.757360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.758737][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.759932][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.765859][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.767548][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.769073][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.770228][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.775748][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.777282][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.788236][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.789610][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.791276][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.793275][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.795002][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.796565][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.798133][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.799693][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.805748][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.811770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.813508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.815131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.816721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.818233][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.819391][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.831361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.832935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.838771][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.850342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.854982][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.859098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.861789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.863245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.867561][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.872387][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.874200][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.876234][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.892550][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.897019][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.898750][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.901757][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.903364][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.908896][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.911590][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.913106][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.914666][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.916086][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.917210][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.918593][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.921271][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.922847][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.932952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.934634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.936048][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.937178][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.938437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.944076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.945688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.947849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.949486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.952243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.953806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.955463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.956973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.965003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.966261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.972037][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.974170][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.975646][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.985586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.987047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.988502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.990116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.994117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.995667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.998029][ T4331] device veth0_vlan entered promiscuous mode [ 34.004813][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.012600][ T4331] device veth1_vlan entered promiscuous mode [ 34.016146][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.019393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.021074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.022236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.034783][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.042091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.043728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.045333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.052661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.054338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.062154][ T4331] device veth0_macvtap entered promiscuous mode [ 34.072066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.073592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.075220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.078227][ T4331] device veth1_macvtap entered promiscuous mode [ 34.094799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.096325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.097827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.099392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.101153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.106919][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.114660][ T4321] device veth0_vlan entered promiscuous mode [ 34.116885][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.118232][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.121898][ T4321] device veth1_vlan entered promiscuous mode [ 34.133244][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.136067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.137752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.139073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.141659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.145080][ T4326] device veth0_vlan entered promiscuous mode [ 34.147958][ T4326] device veth1_vlan entered promiscuous mode [ 34.152943][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.157100][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.158531][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.160436][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.161816][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.164606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.166727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.168234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.169689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.171904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.173431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.174731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.176029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.177514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.183096][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.190500][ T4326] device veth0_macvtap entered promiscuous mode [ 34.193981][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.195408][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.197186][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.198806][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.211909][ T4321] device veth0_macvtap entered promiscuous mode [ 34.223404][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.225126][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.226713][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.228275][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.229820][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.232332][ T4321] device veth1_macvtap entered promiscuous mode [ 34.238544][ T4326] device veth1_macvtap entered promiscuous mode [ 34.248129][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.251476][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.253954][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.263063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.264573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.265980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.267547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.269089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.274537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.276132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.277538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.281366][ T4332] device veth0_vlan entered promiscuous mode [ 34.284824][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.286606][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.288320][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.290721][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.292992][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.296051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.297781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.304458][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.306151][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308344][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.311716][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.313450][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.315101][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.316815][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.319605][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.321776][ T4332] device veth1_vlan entered promiscuous mode [ 34.323519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.325032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.326738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.328438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.334069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.342527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.344008][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.345442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.349502][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.351263][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.352622][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.353980][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.359664][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.361200][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.361230][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.361241][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.361253][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.370746][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.375103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.385209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.386835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.393099][ T4332] device veth0_macvtap entered promiscuous mode [ 34.397861][ T4322] device veth0_vlan entered promiscuous mode [ 34.399353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.400927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.402269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.403840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.422335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.431998][ T4332] device veth1_macvtap entered promiscuous mode [ 34.436661][ T4322] device veth1_vlan entered promiscuous mode [ 34.443461][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.444779][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.446238][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.447765][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.449175][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.452612][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.457507][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.458757][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.461631][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.478057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.479566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.483645][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.485435][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.487092][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.488850][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.491316][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.492988][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.495261][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.498780][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.500735][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.501591][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.503819][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.505337][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.509516][ T4322] device veth0_macvtap entered promiscuous mode [ 34.512720][ T4322] device veth1_macvtap entered promiscuous mode [ 34.516177][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.517372][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.528263][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.533141][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.534753][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.536355][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.537944][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.539568][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.542638][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.543988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.545585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.547094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.548515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.551797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.554887][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.556683][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.558255][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.561234][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.562886][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.564741][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.573617][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.575448][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.578594][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.591759][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.593673][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.595223][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.596881][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.598510][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.600574][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.602099][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.603714][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.606114][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.608569][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.611005][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.612264][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.613590][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.623981][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.625302][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.653863][ T4332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.655264][ T4332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.656708][ T4332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.658066][ T4332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.672792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.674291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.675666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.677245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.784781][ T4404] ======================================================= [ 34.784781][ T4404] WARNING: The mand mount option has been deprecated and [ 34.784781][ T4404] and is ignored by this kernel. Remove the mand [ 34.784781][ T4404] option from the mount to silence this warning. [ 34.784781][ T4404] ======================================================= [ 35.058111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.059466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.079054][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.080541][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.409055][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 35.668091][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 35.668362][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 35.668525][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 35.668594][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 36.070534][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 36.084323][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 36.141764][ T4421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.143390][ T4421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.182999][ T4421] binder: 4414:4421 tried to acquire reference to desc 0, got 1 instead [ 36.184998][ T4421] binder: 4414:4421 got transaction with invalid data ptr [ 36.186108][ T4421] binder: 4414:4421 transaction call to 4414:0 failed 6/29201/-14, size 0-4088 line 3333 [ 36.204446][ T24] binder: undelivered TRANSACTION_COMPLETE [ 36.205491][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.431231][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.432810][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.450632][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.461359][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.467943][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.471022][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.472364][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.475114][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.529852][ C0] sched: RT throttling activated [ 37.546922][ T4370] binder: undelivered transaction 5, process died. [ 37.898635][ T4440] netlink: 'syz.2.9': attribute type 10 has an invalid length. [ 37.901436][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 37.901456][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 37.901473][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 37.901489][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 37.905758][ T4325] Bluetooth: hci3: command 0x040f tx timeout [ 39.483711][ T1516] libceph: connect (1)[c::]:6789 error -101 [ 39.484976][ T1516] libceph: mon0 (1)[c::]:6789 connect error [ 39.500174][ T1516] libceph: connect (1)[c::]:6789 error -101 [ 39.501294][ T1516] libceph: mon0 (1)[c::]:6789 connect error [ 39.504139][ T4447] ceph: No mds server is up or the cluster is laggy [ 39.555025][ T4325] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 39.556525][ T4325] CPU: 1 PID: 4325 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 39.557777][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 39.559394][ T4325] Workqueue: hci1 hci_rx_work [ 39.560215][ T4325] Call trace: [ 39.560734][ T4325] dump_backtrace+0x1c0/0x1ec [ 39.561461][ T4325] show_stack+0x2c/0x3c [ 39.562132][ T4325] __dump_stack+0x30/0x40 [ 39.562877][ T4325] dump_stack_lvl+0xf4/0x15c [ 39.563632][ T4325] dump_stack+0x1c/0x5c [ 39.564276][ T4325] sysfs_create_dir_ns+0x244/0x264 [ 39.565133][ T4325] kobject_add_internal+0x598/0xb08 [ 39.566001][ T4325] kobject_add+0x140/0x20c [ 39.566754][ T4325] device_add+0x3f0/0xf90 [ 39.567486][ T4325] hci_conn_add_sysfs+0xbc/0x1c8 [ 39.568270][ T4325] le_conn_complete_evt+0xcc8/0x1244 [ 39.569123][ T4325] hci_le_conn_complete_evt+0x114/0x3f4 [ 39.570039][ T4325] hci_le_meta_evt+0x2c0/0x4a0 [ 39.570737][ T4325] hci_event_packet+0x6b8/0xf18 [ 39.571466][ T4325] hci_rx_work+0x324/0xa80 [ 39.572180][ T4325] process_one_work+0x7f8/0x13a4 [ 39.572979][ T4325] worker_thread+0x8c4/0xfec [ 39.573748][ T4325] kthread+0x250/0x2d8 [ 39.574416][ T4325] ret_from_fork+0x10/0x20 [ 39.576094][ T4325] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 39.578292][ T4325] Bluetooth: hci1: failed to register connection device [ 39.816134][ T4462] binder: 4461:4462 tried to acquire reference to desc 0, got 1 instead [ 39.818014][ T4462] binder: 4461:4462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.820315][ T4462] binder: 4462 RLIMIT_NICE not set [ 39.821210][ T4462] binder: 4462 RLIMIT_NICE not set [ 39.822503][ T4462] binder: 4462 RLIMIT_NICE not set [ 39.823370][ T4462] binder_alloc: 4461: binder_alloc_buf, no vma [ 39.824351][ T4462] binder: cannot allocate buffer: vma cleared, target dead or dying [ 39.824373][ T4462] binder: 4461:4462 transaction reply to 4461:4462 failed 12/29189/-3, size 0-0 line 3230 [ 39.827069][ T4462] binder: send failed reply for transaction 11 to 4461:4462 [ 39.828978][ T7] binder: undelivered TRANSACTION_COMPLETE [ 39.830113][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.837739][ T7] binder: undelivered TRANSACTION_ERROR: 29190 [ 39.948712][ T4325] Bluetooth: hci3: command 0x0419 tx timeout [ 39.949811][ T4325] Bluetooth: hci2: command 0x0419 tx timeout [ 39.951527][ T4325] Bluetooth: hci1: command 0x0419 tx timeout [ 39.952452][ T4325] Bluetooth: hci4: command 0x0419 tx timeout [ 39.953481][ T4325] Bluetooth: hci0: command 0x0419 tx timeout [ 43.392825][ T4502] binder: 4501:4502 tried to acquire reference to desc 0, got 1 instead [ 43.394957][ T4502] binder: 4501:4502 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.396921][ T4502] binder: 4502 RLIMIT_NICE not set [ 43.397986][ T4502] binder: 4502 RLIMIT_NICE not set [ 43.399286][ T4502] binder: 4502 RLIMIT_NICE not set [ 43.402409][ T4502] binder_alloc: 4501: binder_alloc_buf, no vma [ 43.403368][ T4502] binder: cannot allocate buffer: vma cleared, target dead or dying [ 43.403392][ T4502] binder: 4501:4502 transaction reply to 4501:4502 failed 18/29189/-3, size 0-0 line 3230 [ 43.406318][ T4502] binder: send failed reply for transaction 17 to 4501:4502 [ 43.408298][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 43.409221][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.416515][ T4369] binder: undelivered TRANSACTION_ERROR: 29190 [ 44.479302][ T1516] libceph: connect (1)[c::]:6789 error -101 [ 44.480428][ T1516] libceph: mon0 (1)[c::]:6789 connect error [ 44.481599][ T1516] libceph: connect (1)[c::]:6789 error -101 [ 44.482674][ T1516] libceph: mon0 (1)[c::]:6789 connect error [ 44.483734][ T4510] ceph: No mds server is up or the cluster is laggy [ 44.530015][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 44.531704][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 44.532869][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.534432][ T47] Workqueue: hci0 hci_rx_work [ 44.535161][ T47] Call trace: [ 44.535662][ T47] dump_backtrace+0x1c0/0x1ec [ 44.536384][ T47] show_stack+0x2c/0x3c [ 44.537095][ T47] __dump_stack+0x30/0x40 [ 44.537787][ T47] dump_stack_lvl+0xf4/0x15c [ 44.538549][ T47] dump_stack+0x1c/0x5c [ 44.539213][ T47] sysfs_create_dir_ns+0x244/0x264 [ 44.540074][ T47] kobject_add_internal+0x598/0xb08 [ 44.540965][ T47] kobject_add+0x140/0x20c [ 44.541684][ T47] device_add+0x3f0/0xf90 [ 44.542323][ T47] hci_conn_add_sysfs+0xbc/0x1c8 [ 44.543069][ T47] le_conn_complete_evt+0xcc8/0x1244 [ 44.543853][ T47] hci_le_conn_complete_evt+0x114/0x3f4 [ 44.544821][ T47] hci_le_meta_evt+0x2c0/0x4a0 [ 44.545628][ T47] hci_event_packet+0x6b8/0xf18 [ 44.546449][ T47] hci_rx_work+0x324/0xa80 [ 44.547224][ T47] process_one_work+0x7f8/0x13a4 [ 44.548028][ T47] worker_thread+0x8c4/0xfec [ 44.548838][ T47] kthread+0x250/0x2d8 [ 44.549464][ T47] ret_from_fork+0x10/0x20 [ 44.550509][ T47] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.552534][ T47] Bluetooth: hci0: failed to register connection device [ 44.727299][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 44.728387][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 44.729638][ T4518] ceph: No mds server is up or the cluster is laggy [ 44.732346][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 44.733508][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 44.997922][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 44.999420][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 48.055343][ T4547] Zero length message leads to an empty skb [ 48.059107][ T4547] virtio-fs: tag not found [ 48.065197][ T4547] netlink: 'syz.1.39': attribute type 5 has an invalid length. [ 48.092402][ T4545] device syzkaller0 entered promiscuous mode [ 48.274222][ T4556] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 49.541393][ T4407] unregister_netdevice: waiting for team0 to become free. Usage count = 4 [ 49.544530][ T4407] leaked reference. [ 49.545365][ T4407] fib6_nh_init+0x630/0x1ad4 [ 49.546080][ T4407] ip6_route_info_create+0x7b0/0xf78 [ 49.547070][ T4407] addrconf_f6i_alloc+0x1a8/0x36c [ 49.548000][ T4407] ipv6_add_addr+0x3c8/0xce0 [ 49.548808][ T4407] addrconf_add_linklocal+0x23c/0x608 [ 49.549751][ T4407] addrconf_addr_gen+0x3ec/0x4fc [ 49.550643][ T4407] addrconf_init_auto_addrs+0x5e0/0x94c [ 49.551646][ T4407] addrconf_notify+0x8c4/0xc8c [ 49.552454][ T4407] raw_notifier_call_chain+0xd4/0x164 [ 49.553435][ T4407] netdev_state_change+0x158/0x214 [ 49.554342][ T4407] linkwatch_do_dev+0x108/0x1a0 [ 49.555135][ T4407] __linkwatch_run_queue+0x35c/0x638 [ 49.556040][ T4407] linkwatch_event+0x58/0x68 [ 49.556829][ T4407] process_one_work+0x7f8/0x13a4 [ 49.557744][ T4407] worker_thread+0xb0c/0xfec [ 49.558525][ T4407] kthread+0x250/0x2d8 [ 49.559197][ T4407] leaked reference. [ 49.559841][ T4407] fib6_nh_init+0x630/0x1ad4 [ 49.560619][ T4407] ip6_route_info_create+0x7b0/0xf78 [ 49.561520][ T4407] addrconf_f6i_alloc+0x1a8/0x36c [ 49.562334][ T4407] addrconf_permanent_addr+0x288/0x8d4 [ 49.563195][ T4407] addrconf_notify+0x7b0/0xc8c [ 49.564045][ T4407] raw_notifier_call_chain+0xd4/0x164 [ 49.564916][ T4407] __dev_notify_flags+0x250/0x480 [ 49.565695][ T4407] dev_change_flags+0xc8/0x154 [ 49.566553][ T4407] do_setlink+0xa5c/0x3434 [ 49.567347][ T4407] rtnl_newlink+0x13cc/0x1a50 [ 49.568114][ T4407] rtnetlink_rcv_msg+0x698/0xcdc [ 49.568928][ T4407] netlink_rcv_skb+0x218/0x3e8 [ 49.569802][ T4407] rtnetlink_rcv+0x28/0x38 [ 49.570597][ T4407] netlink_unicast+0x60c/0x814 [ 49.571460][ T4407] netlink_sendmsg+0x6f4/0x9c0 [ 49.572333][ T4407] __sys_sendto+0x324/0x440 [ 49.573012][ T4407] leaked reference. [ 49.573691][ T4407] netdev_tracker_alloc+0x68/0xb0 [ 49.574557][ T4407] fib_create_info+0x1990/0x1e58 [ 49.575433][ T4407] fib_table_insert+0xac/0x13a8 [ 49.576211][ T4407] fib_magic+0x26c/0x344 [ 49.576948][ T4407] fib_add_ifaddr+0x118/0x4f8 [ 49.577712][ T4407] fib_inetaddr_event+0x12c/0x1f8 [ 49.578590][ T4407] blocking_notifier_call_chain+0xf0/0x198 [ 49.579597][ T4407] __inet_insert_ifa+0x85c/0xa10 [ 49.580432][ T4407] inet_rtm_newaddr+0x8a0/0x15b0 [ 49.581296][ T4407] rtnetlink_rcv_msg+0x698/0xcdc [ 49.582098][ T4407] netlink_rcv_skb+0x218/0x3e8 [ 49.582885][ T4407] rtnetlink_rcv+0x28/0x38 [ 49.583578][ T4407] netlink_unicast+0x60c/0x814 [ 49.584491][ T4407] netlink_sendmsg+0x6f4/0x9c0 [ 49.585320][ T4407] __sys_sendto+0x324/0x440 [ 49.586100][ T4407] __arm64_sys_sendto+0xd8/0xf8