last executing test programs: 15.451500893s ago: executing program 3 (id=96): setreuid(0x0, 0x0) syz_clone(0x488c7100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x16) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, 0x0) r5 = timerfd_create(0x8, 0x80000) timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) 13.815963845s ago: executing program 3 (id=101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x701}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 11.589181855s ago: executing program 2 (id=104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) r6 = syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 11.388759491s ago: executing program 0 (id=107): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 11.246966802s ago: executing program 0 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10.806411718s ago: executing program 1 (id=109): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c11941", 0x3b}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) readv(r3, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 10.740712043s ago: executing program 0 (id=111): setreuid(0x0, 0x0) syz_clone(0x488c7100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x16) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, 0x0) r5 = timerfd_create(0x8, 0x80000) timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) 10.146930521s ago: executing program 4 (id=112): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x4) socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000140)={0x0, 0x7ff}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.041491381s ago: executing program 0 (id=113): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x2404c044) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@delsa={0x34, 0x11, 0x4b49a87d091fa3c9, 0x70bd2c, 0x25dfdbfe, {@in6=@remote, 0x4d6, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x6e}}]}, 0x34}}, 0x8000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r7, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1fe22dc8) socket(0x400000000010, 0x3, 0x0) fsopen(&(0x7f00000004c0)='ocfs2\x00', 0x1) 7.507270764s ago: executing program 1 (id=114): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 7.394005574s ago: executing program 2 (id=115): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd_index=0xa, 0x0, &(0x7f0000000440)=""/125, 0xffffffffffffff26, 0x10, 0x1}) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffff7c, 0x9, 0x1259, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 7.025317704s ago: executing program 1 (id=116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6.496328486s ago: executing program 3 (id=117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x64, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=r0], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) 6.094882359s ago: executing program 4 (id=118): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) connect$phonet_pipe(r5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) getpeername(r7, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040010) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x7af3, 0x8, 0x4}) 3.973868059s ago: executing program 2 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40201, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) mkdirat$cgroup(r2, 0x0, 0x1ff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_CQ_RING(&(0x7f0000696000/0x12000)=nil, 0x12000, 0x2000001, 0x80010, r2, 0x8000000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) 3.891050047s ago: executing program 4 (id=120): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42561, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$phonet(0x23, 0x2, 0x1) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.774933466s ago: executing program 3 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.606025049s ago: executing program 1 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) 3.544523714s ago: executing program 4 (id=123): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0xb0) 3.381694098s ago: executing program 0 (id=124): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0xd023}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) listen(r2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf350900020073797a300000000008004100736977001000330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r8, &(0x7f00000004c0)=@rc={0x1f, @none, 0xe}, 0x80) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e070008140fc9000844ee10fd71027de6a9071d47d59a0b036e9401330e522d76334b33513c78cf397f054e7b30c4507318ed284abf532880111d1114df0e8d37d380adc00787db0c93db953bf896c156ed5e8367536f13f6d19c0cfce366cef3d0fc5dfd4bd39761473e55f43751d09e8b4ff78294b7305832c4db3fcd7efcfcd7ff71cdc4e8f598ad46c8f739157105ca848716acb88358ea"], 0xa) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x40000) 3.381250218s ago: executing program 4 (id=125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) r6 = syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 3.005871528s ago: executing program 3 (id=126): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 3.001356688s ago: executing program 1 (id=127): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x3) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0x107) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCCONS(r0, 0x80047462) 2.73645195s ago: executing program 1 (id=128): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x56d7, 0x4, 0x20, 0x5, "12b6f6932b03aa1571802122a5988817185cde0a83d2e2c9efd456d2ae1da87654127611a98856902f07e6af6e05e2051d31ed16805ba67802decd505596dc6d", "5222d8bb08173bb785aa85c639b9d75d2418c272e602769dc235a6052327e07f", [0x3, 0x2]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000002c00)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}, 0xbd96}, {{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/36, 0x24}, {&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000001840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/23, 0x17}, {&(0x7f00000029c0)=""/119, 0x77}, {0x0}], 0x5, &(0x7f0000002b40)=""/133, 0x85}, 0x7}], 0x3, 0x40012600, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.73306038s ago: executing program 2 (id=129): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000000240), 0x0) 2.72538627s ago: executing program 3 (id=130): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd_index=0xa, 0x0, &(0x7f0000000440)=""/125, 0xffffffffffffff26, 0x10, 0x1}) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffff7c, 0x9, 0x1259, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 2.525805717s ago: executing program 2 (id=131): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000053996af550a7512c0000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000104000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100e269747769736500a0000289080003400000000208000140000000140800024000000038870000000000000073797a30000000001400100011000100020700000a0000000000000017c37bd6e60855f6aadf4045f23ef8a56f8a256f13de7006bd8897f45e3aaf3f3f516c6017b951b00c5452ba40e6242662067fa223b905c4db6d203657c39645fb6488bd7010f408d0d06d0d9e9ae462f30c72ae17af19007bf40303d851e890684b7f1b9208289cf3f87f188132be59ad4f"], 0x104}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) connect$phonet_pipe(r5, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) getpeername(r7, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040010) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x7af3, 0x8, 0x4}) 241.357391ms ago: executing program 0 (id=132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x64, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=r0], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) 32.899848ms ago: executing program 4 (id=133): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x8, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x7ff, [0x7ff, 0x8, 0x6]}}]}, 0x30) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000100)=""/110) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000500)=ANY=[@ANYBLOB="5b37182347bc61090000000086dd609d008000683aff20010000000000000000000000000001ff02000000000000000000000000000104009078000000056ae397f700050601fe8000000000000000000000000000aafe88000000000000000000000600010106060000000000000401fa0004000000000401b4c20400000007c910fc000000000000000000000000000000c2040000f742010400"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0xcd71}, 0x18) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x1, @rand_addr=0x64010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xdf, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x2, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x91, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 0s ago: executing program 2 (id=134): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c11941", 0x3b}], 0x1}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 34.492583][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.525218][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. syzkaller login: [ 52.193553][ T4252] cgroup: Unknown subsys name 'net' [ 52.319296][ T4252] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.532458][ T4252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.807367][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.815811][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.830066][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.838123][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.846627][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.855274][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.865764][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.873171][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.875455][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.880465][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.888770][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.897479][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.903086][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.909380][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.916254][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.923949][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.934635][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.944145][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.944632][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.951538][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.960060][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.966382][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.973257][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.980278][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.987762][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.994455][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.009371][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.016929][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.034763][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.042123][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.505037][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 55.548369][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.601142][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 55.637624][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 55.661509][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.740283][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.748552][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.756773][ T4265] device bridge_slave_0 entered promiscuous mode [ 55.769850][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.777144][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.785886][ T4275] device bridge_slave_0 entered promiscuous mode [ 55.799147][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.809635][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.817541][ T4265] device bridge_slave_1 entered promiscuous mode [ 55.829848][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.836988][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.844988][ T4275] device bridge_slave_1 entered promiscuous mode [ 55.901587][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.908889][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.916933][ T4272] device bridge_slave_0 entered promiscuous mode [ 55.946119][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.958653][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.966153][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.973898][ T4272] device bridge_slave_1 entered promiscuous mode [ 55.983096][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.993319][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.000536][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.008491][ T4273] device bridge_slave_0 entered promiscuous mode [ 56.024611][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.033818][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.041179][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.049046][ T4266] device bridge_slave_0 entered promiscuous mode [ 56.066219][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.083023][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.090291][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.098787][ T4273] device bridge_slave_1 entered promiscuous mode [ 56.113456][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.120705][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.129026][ T4266] device bridge_slave_1 entered promiscuous mode [ 56.176767][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.189498][ T4275] team0: Port device team_slave_0 added [ 56.205025][ T4265] team0: Port device team_slave_0 added [ 56.219392][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.229998][ T4275] team0: Port device team_slave_1 added [ 56.237752][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.248125][ T4265] team0: Port device team_slave_1 added [ 56.255514][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.284756][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.308575][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.320780][ T4272] team0: Port device team_slave_0 added [ 56.335182][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.342146][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.369059][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.394495][ T4272] team0: Port device team_slave_1 added [ 56.423295][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.430367][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.456372][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.468269][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.475441][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.501398][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.515358][ T4266] team0: Port device team_slave_0 added [ 56.530879][ T4273] team0: Port device team_slave_0 added [ 56.539018][ T4273] team0: Port device team_slave_1 added [ 56.548118][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.555591][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.581685][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.594485][ T4266] team0: Port device team_slave_1 added [ 56.636548][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.643535][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.669677][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.707354][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.714663][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.740772][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.757379][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.764635][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.791570][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.805023][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.811988][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.838205][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.855115][ T4275] device hsr_slave_0 entered promiscuous mode [ 56.862098][ T4275] device hsr_slave_1 entered promiscuous mode [ 56.869550][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.876900][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.902907][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.915426][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.922476][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.948601][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.005467][ T4265] device hsr_slave_0 entered promiscuous mode [ 57.012139][ T4265] device hsr_slave_1 entered promiscuous mode [ 57.018895][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.027143][ T4265] Cannot create hsr debugfs directory [ 57.074160][ T4272] device hsr_slave_0 entered promiscuous mode [ 57.082056][ T4272] device hsr_slave_1 entered promiscuous mode [ 57.088635][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 57.096171][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 57.102415][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 57.102481][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.108654][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 57.122165][ T4272] Cannot create hsr debugfs directory [ 57.138371][ T4273] device hsr_slave_0 entered promiscuous mode [ 57.145632][ T4273] device hsr_slave_1 entered promiscuous mode [ 57.152164][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.160042][ T4273] Cannot create hsr debugfs directory [ 57.165704][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 57.246607][ T4266] device hsr_slave_0 entered promiscuous mode [ 57.253320][ T4266] device hsr_slave_1 entered promiscuous mode [ 57.261425][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.269179][ T4266] Cannot create hsr debugfs directory [ 57.497620][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.521684][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.542219][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.556112][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.580342][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.599385][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.615955][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.633680][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.682777][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.712521][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.747804][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.762934][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.773894][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.787703][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.798660][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.821474][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.893113][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.937980][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.963040][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.978264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.989759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.005785][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.019179][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.038226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.048436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.062658][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.070029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.083504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.103182][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.119706][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.129818][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.141294][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.148475][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.157227][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.181232][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.190846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.221838][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.250411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.261961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.278986][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.288052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.297678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.307207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.323565][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.338646][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.351732][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.361707][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.371348][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.381043][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.389748][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.396850][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.405318][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.414116][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.422846][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.450326][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.459528][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.468322][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.475427][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.483362][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.492410][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.501072][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.508205][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.516298][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.525461][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.534050][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.542561][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.549650][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.558084][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.566951][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.577294][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.586035][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.599720][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.628241][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.636783][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.649796][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.657701][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.668582][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.677041][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.686758][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.695721][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.704074][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.712604][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.723900][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.732529][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.741255][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.749889][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.757015][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.773347][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.781566][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.792062][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.803759][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.813864][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.825114][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.848638][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.860589][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.875132][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.882804][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.898250][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.908341][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.915555][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.931667][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.941468][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.956603][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.970408][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.979813][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.000351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.012516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.023273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.037575][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.048942][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.086282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.105652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.125134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.142060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.159662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.167862][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 59.173905][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 59.181035][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 59.187451][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 59.215563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.240029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.254591][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 59.268027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.292441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.301225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.309714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.318829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.336828][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.359056][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.410813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.429766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.454207][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.467364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.485441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.507165][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.531969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.556027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.586052][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.593184][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.616738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.670189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.679839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.697468][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.704649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.718668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.730288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.743434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.751732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.790326][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.801434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.817547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.845720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.859480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.869391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.881348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.891637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.901969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.910907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.934080][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.958438][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.970854][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.981823][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.005427][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.012969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.029284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.040263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.077447][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.090248][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.102453][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.178465][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.187746][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.203058][ T4275] device veth0_vlan entered promiscuous mode [ 60.229534][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.239820][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.249113][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.261008][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.270121][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.279885][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.291962][ T4273] device veth0_vlan entered promiscuous mode [ 60.309788][ T4275] device veth1_vlan entered promiscuous mode [ 60.328498][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.337069][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.345246][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.353350][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.363540][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.373745][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.408830][ T4273] device veth1_vlan entered promiscuous mode [ 60.427688][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.437299][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.450478][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.477982][ T4272] device veth0_vlan entered promiscuous mode [ 60.498861][ T4265] device veth0_vlan entered promiscuous mode [ 60.511497][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.521818][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.537345][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.546193][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.554735][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.563086][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.572723][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.587306][ T4275] device veth0_macvtap entered promiscuous mode [ 60.600058][ T4265] device veth1_vlan entered promiscuous mode [ 60.621469][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.630636][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.639033][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.648719][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.657583][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.665408][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.675188][ T4272] device veth1_vlan entered promiscuous mode [ 60.682840][ T4275] device veth1_macvtap entered promiscuous mode [ 60.710547][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.721144][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.729295][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.740000][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.748904][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.770818][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.780524][ T4273] device veth0_macvtap entered promiscuous mode [ 60.793123][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.802251][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.810982][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.820062][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.833721][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.855571][ T4265] device veth0_macvtap entered promiscuous mode [ 60.863834][ T4273] device veth1_macvtap entered promiscuous mode [ 60.882220][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.896121][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.907632][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.917451][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.929767][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.939044][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.948023][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.956880][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.966452][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.975254][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.984053][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.996083][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.005546][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.015530][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.024583][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.042462][ T4272] device veth0_macvtap entered promiscuous mode [ 61.057730][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.072174][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.084175][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.092302][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.101100][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.109781][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.118739][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.130617][ T4265] device veth1_macvtap entered promiscuous mode [ 61.142041][ T4272] device veth1_macvtap entered promiscuous mode [ 61.153246][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.163719][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.175014][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.183773][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.214151][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.227178][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.237384][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.247991][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 61.254692][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 61.255333][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.260695][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 61.274232][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.277448][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 61.293121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.301643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.310037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.318887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.329252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.335538][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 61.338187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.375868][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.388339][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.398860][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.410322][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.421707][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.440654][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.450364][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.459371][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.468220][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.477124][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.485610][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.493642][ T4266] device veth0_vlan entered promiscuous mode [ 61.511318][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.520852][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.530593][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.540541][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.580601][ T4266] device veth1_vlan entered promiscuous mode [ 61.617127][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.627965][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.638670][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.649571][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.659448][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.669994][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.681151][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.717631][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.732179][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.741709][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.751033][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.762686][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.773755][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.783906][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.797767][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.809060][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.819806][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.830989][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.863551][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.873819][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.885343][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.894054][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.904048][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.913078][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.946430][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.955798][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.967937][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.969122][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.976762][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.992396][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.999515][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.021378][ T4266] device veth0_macvtap entered promiscuous mode [ 62.028752][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.037278][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.065666][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.079264][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.093039][ T4266] device veth1_macvtap entered promiscuous mode [ 62.107171][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.117186][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.142418][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.155792][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.180588][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.198599][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.211318][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.221985][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.233003][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.243282][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.254128][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.264077][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.276210][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.288360][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.302166][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.312038][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.323317][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.335555][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.345636][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.356222][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.356748][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.366793][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.381573][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.392301][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.406958][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.417708][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.429475][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.437384][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.447376][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.456277][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.466148][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.473975][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.483510][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.510142][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.531595][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.565922][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.578679][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.595666][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.603896][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.671922][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.705247][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.717099][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.794140][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.813795][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.842439][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.854501][ T4375] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.881318][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.020360][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.071239][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.091721][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.123841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.134227][ T4375] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 63.145298][ T4375] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 63.155313][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.192574][ T4375] usb 1-1: config 0 descriptor?? [ 63.324567][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 63.330640][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 63.336846][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 63.336873][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 63.414984][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 63.550659][ T4390] loop4: detected capacity change from 0 to 524255232 [ 63.574292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.582549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.590767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.599007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 63.607417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 63.615697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 63.643397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.651733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 63.664281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.672498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.224083][ T7] usb 1-1: USB disconnect, device number 2 [ 64.442971][ T4400] netlink: 'syz.1.6': attribute type 16 has an invalid length. [ 64.452179][ T4400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'. [ 64.468431][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.974523][ T4391] loop4: detected capacity change from 524255232 to 524287956 [ 68.120233][ T4447] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 68.513488][ T26] audit: type=1326 audit(1754986676.509:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 68.621080][ T26] audit: type=1326 audit(1754986676.519:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 68.832277][ T26] audit: type=1326 audit(1754986676.519:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 68.890019][ T26] audit: type=1326 audit(1754986676.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 68.936401][ T26] audit: type=1326 audit(1754986676.519:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 69.060383][ T26] audit: type=1326 audit(1754986676.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 69.150374][ T4459] 9pnet_virtio: no channels available for device syz [ 69.256539][ T26] audit: type=1326 audit(1754986676.519:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 69.378090][ T26] audit: type=1326 audit(1754986676.519:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 69.546538][ T26] audit: type=1326 audit(1754986676.519:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 70.607119][ T4462] device wireguard0 entered promiscuous mode [ 71.309502][ T4471] loop4: detected capacity change from 0 to 524255232 [ 71.339208][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400421][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527493][ T4472] loop4: detected capacity change from 524255232 to 524287956 [ 72.682262][ T4470] netlink: 'syz.2.21': attribute type 16 has an invalid length. [ 72.691010][ T4470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 72.700718][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.145125][ T1180] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.352497][ T1180] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.403309][ T1180] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 75.587137][ T1180] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.736868][ T1180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.852035][ T1180] usb 3-1: config 0 descriptor?? [ 76.111224][ T4500] binder: BINDER_SET_CONTEXT_MGR already set [ 76.177501][ T4500] binder: 4499:4500 ioctl 4018620d 200000000040 returned -16 [ 76.275951][ T4503] loop4: detected capacity change from 0 to 524255232 [ 76.309563][ T1180] usb 3-1: USB disconnect, device number 2 [ 76.344995][ T4503] loop4: detected capacity change from 524255232 to 524287956 [ 76.437394][ T26] audit: type=1326 audit(1754986684.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 76.446575][ T126] cfg80211: failed to load regulatory.db [ 76.564394][ T26] audit: type=1326 audit(1754986684.439:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 76.650839][ T26] audit: type=1326 audit(1754986684.439:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 76.744230][ T26] audit: type=1326 audit(1754986684.439:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 76.901646][ T26] audit: type=1326 audit(1754986684.439:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 77.025441][ T26] audit: type=1326 audit(1754986684.439:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 77.147851][ T26] audit: type=1326 audit(1754986684.439:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 77.265005][ T26] audit: type=1326 audit(1754986684.439:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 77.476843][ T26] audit: type=1326 audit(1754986684.439:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 78.274373][ T26] audit: type=1326 audit(1754986684.439:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d8ebe9 code=0x7ffc0000 [ 78.758227][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 78.777763][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 78.796745][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 78.812916][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 78.827745][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 78.840567][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 78.855376][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 82.668310][ T4564] device bridge1 entered promiscuous mode [ 86.484697][ T4577] loop4: detected capacity change from 0 to 524255232 [ 86.605808][ T4578] loop4: detected capacity change from 524255232 to 524287956 [ 86.844069][ T4577] Zero length message leads to an empty skb [ 88.943965][ T4598] netlink: 3 bytes leftover after parsing attributes in process `syz.2.61'. [ 89.199104][ T4600] input: syz1 as /devices/virtual/input/input5 [ 89.835363][ T4605] hub 2-0:1.0: USB hub found [ 89.883197][ T4605] hub 2-0:1.0: 1 port detected [ 90.293922][ T4606] input: syz1 as /devices/virtual/input/input6 [ 91.796659][ T4624] loop4: detected capacity change from 0 to 524255232 [ 91.846666][ T4624] loop4: detected capacity change from 524255232 to 524287956 [ 92.313471][ T4629] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.712404][ T4636] hub 2-0:1.0: USB hub found [ 92.737246][ T4636] hub 2-0:1.0: 1 port detected [ 93.218093][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 93.234692][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 93.253222][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 93.274407][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 93.289284][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 93.305035][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 93.321727][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 96.315012][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 96.315028][ T26] audit: type=1326 audit(1754986704.319:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.368173][ T26] audit: type=1326 audit(1754986704.349:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.441821][ T26] audit: type=1326 audit(1754986704.369:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.539519][ T26] audit: type=1326 audit(1754986704.369:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.584641][ T26] audit: type=1326 audit(1754986704.369:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.609595][ T26] audit: type=1326 audit(1754986704.369:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.643974][ T26] audit: type=1326 audit(1754986704.369:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.676509][ T26] audit: type=1326 audit(1754986704.369:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.702544][ T26] audit: type=1326 audit(1754986704.369:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 96.858159][ T26] audit: type=1326 audit(1754986704.369:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca2b8ebe9 code=0x7ffc0000 [ 97.851909][ T4664] sched: RT throttling activated [ 98.486378][ T4680] input: syz1 as /devices/virtual/input/input7 [ 98.678358][ T4683] netlink: 3 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.684542][ T951] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 99.886661][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.919977][ T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.980898][ T951] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.039485][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.145379][ T951] usb 2-1: config 0 descriptor?? [ 100.187884][ T951] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.401510][ T951] dvb-usb: bulk message failed: -22 (3/0) [ 100.470309][ T951] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 101.300766][ T951] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 101.812519][ T951] usb 2-1: media controller created [ 102.282216][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.218357][ T951] dvb-usb: bulk message failed: -22 (6/0) [ 103.263436][ T951] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 103.330595][ T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 103.503326][ T951] dvb-usb: schedule remote query interval to 150 msecs. [ 103.529403][ T951] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 103.655219][ T951] usb 2-1: USB disconnect, device number 2 [ 103.811401][ T951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 103.851912][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 103.907426][ T4725] wg1 speed is unknown, defaulting to 1000 [ 103.933074][ T4725] wg1 speed is unknown, defaulting to 1000 [ 103.946643][ T4725] wg1 speed is unknown, defaulting to 1000 [ 103.983288][ T4725] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.027131][ T4725] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.148838][ T4270] Bluetooth: hci2: failed to read key size for handle 201 [ 104.236904][ T4725] wg1 speed is unknown, defaulting to 1000 [ 104.257259][ T4725] wg1 speed is unknown, defaulting to 1000 [ 104.275387][ T4725] wg1 speed is unknown, defaulting to 1000 [ 104.305271][ T4725] wg1 speed is unknown, defaulting to 1000 [ 104.312079][ T4725] wg1 speed is unknown, defaulting to 1000 [ 104.712471][ T4752] netlink: 3 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.912468][ T4753] loop4: detected capacity change from 0 to 524255232 [ 104.943618][ T4725] syz.4.86 (4725) used greatest stack depth: 20848 bytes left [ 104.984428][ T4753] loop4: detected capacity change from 524255232 to 524287956 [ 105.964521][ T4270] Bluetooth: hci4: command 0x0405 tx timeout [ 106.799996][ T4776] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 108.205934][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 108.216100][ T4280] Bluetooth: hci2: Injecting HCI hardware error event [ 108.226522][ T4270] Bluetooth: hci2: hardware error 0x00 [ 108.406794][ T4784] block device autoloading is deprecated and will be removed. [ 108.636555][ T4786] device bridge1 entered promiscuous mode [ 109.548161][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.562961][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 109.587401][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 109.602121][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 109.620040][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 109.633233][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 109.647228][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 110.524376][ T4270] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.489414][ T4838] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 115.595664][ T4833] input: syz1 as /devices/virtual/input/input9 [ 116.604160][ T4854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.122'. [ 117.238445][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 117.267434][ T4861] siw: device registration error -23 [ 117.368958][ T4270] Bluetooth: hci0: failed to read key size for handle 201 [ 117.634551][ T4874] loop4: detected capacity change from 0 to 524255232 [ 117.914430][ T4875] loop4: detected capacity change from 524255232 to 524287956 [ 119.266708][ T4880] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 120.132584][ T4886] netlink: 3 bytes leftover after parsing attributes in process `syz.0.132'. [ 225.264218][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.271257][ C0] (detected by 0, t=10502 jiffies, g=11965, q=18 ncpus=2) [ 225.278462][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294959651-4294949148), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 225.291838][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g11965 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 225.303039][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.313011][ C0] rcu: RCU grace-period kthread stack dump: [ 225.319254][ C0] task:rcu_preempt state:R running task stack:28096 pid:16 ppid:2 flags:0x00004000 [ 225.330061][ C0] Call Trace: [ 225.333348][ C0] [ 225.336295][ C0] __schedule+0x10ec/0x40b0 [ 225.340931][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 225.347016][ C0] schedule+0xb9/0x180 [ 225.351100][ C0] schedule_timeout+0x15c/0x280 [ 225.355963][ C0] ? console_conditional_schedule+0x40/0x40 [ 225.361861][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 225.367867][ C0] ? update_process_times+0x1b0/0x1b0 [ 225.373274][ C0] ? prepare_to_swait_event+0x335/0x350 [ 225.378833][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 225.383711][ C0] ? rcu_gp_kthread+0x380/0x380 [ 225.388737][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 225.394727][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 225.399928][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 225.404694][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 225.410690][ C0] ? finish_swait+0xc3/0x1d0 [ 225.415294][ C0] rcu_gp_kthread+0x95/0x380 [ 225.419897][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.425015][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 225.430918][ C0] ? __kthread_parkme+0x162/0x1c0 [ 225.435957][ C0] kthread+0x29d/0x330 [ 225.440032][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.445149][ C0] ? kthread_blkcg+0xd0/0xd0 [ 225.449747][ C0] ret_from_fork+0x1f/0x30 [ 225.454177][ C0] [ 225.457205][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 225.463529][ C0] Sending NMI from CPU 0 to CPUs 1: [ 225.468741][ C1] NMI backtrace for cpu 1 [ 225.468763][ C1] CPU: 1 PID: 4871 Comm: syz.1.128 Not tainted 6.1.147-syzkaller #0 [ 225.468776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.468784][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 225.468804][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 9f 47 f7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 225.468817][ C1] RSP: 0018:ffffc900001e0e38 EFLAGS: 00000046 [ 225.468830][ C1] RAX: 0000000000052f9e RBX: 0000000000052f9e RCX: 0000000000000838 [ 225.468838][ C1] RDX: 0000000000000000 RSI: 0000000000052f9e RDI: 0000000000000838 [ 225.468847][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3e976 [ 225.468856][ C1] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: dffffc0000000000 [ 225.468865][ C1] R13: 00000000100069b2 R14: ffffffff8c5e0b40 R15: dffffc0000000000 [ 225.468875][ C1] FS: 00007f48bcbb36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 225.468887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.468896][ C1] CR2: 0000000000000040 CR3: 00000000239e5000 CR4: 00000000003506e0 [ 225.468908][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.468915][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.468923][ C1] Call Trace: [ 225.468929][ C1] [ 225.468934][ C1] lapic_next_event+0x5b/0x70 [ 225.468953][ C1] clockevents_program_event+0x1bc/0x310 [ 225.468971][ C1] hrtimer_interrupt+0x59d/0x9c0 [ 225.468995][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 225.469014][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 225.469031][ C1] [ 225.469035][ C1] [ 225.469039][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 225.469053][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 225.469071][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2e 31 43 f7 48 89 df e8 86 f6 43 f7 e8 91 e8 66 f7 fb bf 01 00 00 00 36 74 37 f7 65 8b 05 07 35 e2 75 85 c0 74 02 5b c3 e8 54 46 e0 [ 225.469081][ C1] RSP: 0018:ffffc9000ba07bb8 EFLAGS: 00000286 [ 225.469091][ C1] RAX: d8860a6e012b9d00 RBX: ffff888074fa0940 RCX: d8860a6e012b9d00 [ 225.469101][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0460 RDI: 0000000000000001 [ 225.469110][ C1] RBP: ffff888074fa0dd8 R08: dffffc0000000000 R09: ffffed100e9f4129 [ 225.469126][ C1] R10: ffffed100e9f4129 R11: 1ffff1100e9f4128 R12: 1ffff1100e9f41bb [ 225.469136][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 225.469151][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.469168][ C1] get_signal+0x1163/0x1350 [ 225.469195][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 225.469213][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 225.469230][ C1] ? load_gs_index+0x120/0x120 [ 225.469246][ C1] ? get_sigframe_size+0x10/0x10 [ 225.469268][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 225.469288][ C1] exit_to_user_mode_loop+0x70/0x110 [ 225.469305][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 225.469323][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 225.469340][ C1] do_syscall_64+0x58/0xa0 [ 225.469353][ C1] ? clear_bhb_loop+0x60/0xb0 [ 225.469364][ C1] ? clear_bhb_loop+0x60/0xb0 [ 225.469377][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.469396][ C1] RIP: 0033:0x7f48bbd8ebe7 [ 225.469412][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 225.469422][ C1] RSP: 002b:00007f48bcbb3038 EFLAGS: 00000246 [ 225.469432][ C1] RAX: 000000000000012b RBX: 00007f48bbfb5fa0 RCX: 00007f48bbd8ebe9 [ 225.469441][ C1] RDX: 0000000000000003 RSI: 0000200000002c00 RDI: 0000000000000007 [ 225.469449][ C1] RBP: 00007f48bbe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.469457][ C1] R10: 0000000040012600 R11: 0000000000000246 R12: 0000000000000000 [ 225.469465][ C1] R13: 00007f48bbfb6038 R14: 00007f48bbfb5fa0 R15: 00007ffc92af9138 [ 225.469480][ C1]