last executing test programs: 17.17805816s ago: executing program 4 (id=76): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x4) 17.007967607s ago: executing program 4 (id=81): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f00000006c0), 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x7, 0xf}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 16.04835794s ago: executing program 4 (id=91): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x4) 15.957147314s ago: executing program 4 (id=92): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 15.771749081s ago: executing program 4 (id=96): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r0, 0x7) accept$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbd}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 9.717874736s ago: executing program 0 (id=114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r7, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x40000) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) 8.650105363s ago: executing program 1 (id=119): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x9) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 5.834121915s ago: executing program 1 (id=122): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x400, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x4008041) 5.606558295s ago: executing program 0 (id=123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 5.480944391s ago: executing program 1 (id=126): socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket(0x1e, 0x4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.083662738s ago: executing program 0 (id=127): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x4) 3.034092468s ago: executing program 0 (id=129): read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socket$inet6(0xa, 0x1, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) r2 = syz_io_uring_setup(0x70b7, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x2dd}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x6a5b, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r2}, &(0x7f0000000200), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, 0x0, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x3, 0x0, 0x0) 2.963240351s ago: executing program 1 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfdfffffa, 0x7, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.53399776s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x92f}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0x8}, @val={0x76, 0x6, {0x10, 0xfc, 0xd, 0x9}}}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x20080010) 2.5217854s ago: executing program 0 (id=134): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x43353039, [0x3, 0x7], [0x1, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getegid() fchown(r0, 0x0, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r5, 0x540a, 0x2) 2.499677951s ago: executing program 2 (id=135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) 2.381997437s ago: executing program 1 (id=137): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x4c, 0x12, 0x4, 0x70bd26, 0x25dfdbff, {0x28, 0x1, 0x7f, 0x1, {0x4e24, 0x4e23, [0x8, 0x2, 0x9, 0x5], [0x3, 0x1, 0x101, 0xb], 0x0, [0x3ff, 0x9000]}, 0x80000000, 0xfffffffd}}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040041) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.60387198s ago: executing program 2 (id=138): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f00000006c0), 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x7, 0xf}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.59256164s ago: executing program 3 (id=139): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x4) 1.541470323s ago: executing program 1 (id=140): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xc4f32000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000021a880, 0x0) dup(r0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, 0x0) madvise(&(0x7f0000978000/0x13000)=nil, 0x13000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r3, 0x0) 1.445333557s ago: executing program 3 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0xa, 0x0, 0x2a, 0x0, 0x2, 0x5, 0x9, 0xc7, 0x2, 0x80, 0xc0, 0x1, 0x0, 0x9, 0x2, 0x0, 0x9, 0xa, 0xc, '\x00', 0x2, 0x6}) 1.15779088s ago: executing program 3 (id=142): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x42090) 1.073571363s ago: executing program 4 (id=143): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dd0414c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000000)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 985.768167ms ago: executing program 3 (id=144): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x0, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 889.746591ms ago: executing program 2 (id=145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0xfed2, 0x10, 0x9, 0x8000}, &(0x7f00000001c0)=0x18) 773.617277ms ago: executing program 2 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xefae8b7254b8bab8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d43819}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x52, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 741.506338ms ago: executing program 3 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfdfffffa, 0x7, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 484.885419ms ago: executing program 3 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1ff, 0x3, 0x635e, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x7, 0x4, 0x1006, 0x40000005, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 270.115998ms ago: executing program 0 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x2, 0x7}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=150): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x8, 0x425, 0x10004, 0x6, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) syz_usb_connect$cdc_ncm(0x4, 0x70, &(0x7f0000000040)=ANY=[@ANYBLOB="12090000000000082505a1a4400001e0020109025e0002"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX], 0xf8) r0 = openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 48.585310][ T4170] cgroup: Unknown subsys name 'net' [ 48.725803][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.950051][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.255950][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.289497][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.346529][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.440375][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.462077][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.469791][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.478352][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.490456][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.497797][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.506148][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.526062][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.533205][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.541418][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.549103][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.556374][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.564609][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.619450][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.634072][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.646317][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.656053][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.663529][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.671737][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.680377][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.703001][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.710088][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.718412][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.726947][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.780324][ T4181] team0: Port device team_slave_0 added [ 51.795151][ T4188] team0: Port device team_slave_0 added [ 51.802989][ T4188] team0: Port device team_slave_1 added [ 51.818427][ T4181] team0: Port device team_slave_1 added [ 51.842727][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.861968][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.869032][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.877315][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.893254][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.922951][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.930177][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.938324][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.946072][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.953220][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.979154][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.998310][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.005453][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.031481][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.042629][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.049690][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.058108][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.073242][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.080199][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.106130][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.123634][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.130874][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.157049][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.171986][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.179070][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.187393][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.207754][ T4191] team0: Port device team_slave_0 added [ 52.230402][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.241002][ T4191] team0: Port device team_slave_1 added [ 52.248559][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.310995][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.317787][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.327631][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.345789][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.353135][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.359683][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.367474][ T4181] Cannot create hsr debugfs directory [ 52.383787][ T4183] team0: Port device team_slave_0 added [ 52.402203][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.411979][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.418935][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.445031][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.464798][ T4183] team0: Port device team_slave_1 added [ 52.484300][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.491491][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.517480][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.561268][ T4182] team0: Port device team_slave_0 added [ 52.580088][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.587094][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.613245][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.626077][ T4182] team0: Port device team_slave_1 added [ 52.648414][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.655626][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.681645][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.706083][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.713476][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.739499][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.778276][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.785158][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.791988][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.799535][ T4191] Cannot create hsr debugfs directory [ 52.805570][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.812940][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.839092][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.918099][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.925163][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.931962][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.939527][ T4183] Cannot create hsr debugfs directory [ 53.011609][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.011609][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.012046][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.020980][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.030138][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.042830][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 53.047051][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.055779][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.063722][ T4182] Cannot create hsr debugfs directory [ 53.221337][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.239592][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.262088][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.272349][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.316459][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.325813][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.347551][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.356438][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.423012][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.432991][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.459787][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.468856][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.491501][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.518913][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.527023][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.539151][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.555426][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.576928][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.587064][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.607969][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.645800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.655061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.665925][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.673289][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.730308][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.752350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.761742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.770021][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.777133][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.787751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.796523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.806629][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.817940][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.842409][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.851451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.862057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.870425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.879545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.888404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.896787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.905316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.914034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.923796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.932655][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.945939][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.961128][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.975028][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.984508][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.994052][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.003390][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.012074][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.019164][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.027425][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.059276][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.069631][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.084708][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.096116][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.103237][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.118189][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.133427][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.148025][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.183313][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.198779][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.219146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.228983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.238304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.247784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.259382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.268004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.277361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.286900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.295737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.303762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.322882][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.337779][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.368946][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.378443][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.387960][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.397612][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.406228][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.413325][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.421699][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.433918][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.442249][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.460849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.470585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.479028][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.486128][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.495254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.505060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.514750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.524751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.535530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.543746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.552323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.580430][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.598222][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.608255][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.626749][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.638014][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.650857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.659292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.678507][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.697198][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.708532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.724637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.736763][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.743916][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.752710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.761370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.769837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.778810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.789331][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.796446][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.804842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.825256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.837604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.862699][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.875148][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.897386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.915815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.926682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.936281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.945246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.954866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.963599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.973549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.982158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.998662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.008224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.017282][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.024398][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.034778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.043385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.053478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.076766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.091020][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 55.099940][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.101237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.123826][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 55.125324][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.130131][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 55.137021][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.161795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.176092][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 55.177572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.198654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.207621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.219092][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.243235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.257531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.283047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.297740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.313236][ T4181] device veth0_vlan entered promiscuous mode [ 55.331498][ T4181] device veth1_vlan entered promiscuous mode [ 55.343890][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.352799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.360914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.368625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.377037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.385026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.392582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.401500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.410118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.422407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.441022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.479565][ T4181] device veth0_macvtap entered promiscuous mode [ 55.494926][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.508920][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.521137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.530300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.541090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.549565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.558530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.567614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.576359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.584813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.597461][ T4188] device veth0_vlan entered promiscuous mode [ 55.611259][ T4181] device veth1_macvtap entered promiscuous mode [ 55.627285][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.638268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.648872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.658047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.666532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.675098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.683873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.691615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.699064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.707162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.718976][ T4188] device veth1_vlan entered promiscuous mode [ 55.735463][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.767983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.777326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.786993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.796478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.806074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.815431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.823943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.836455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.844467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.864219][ T4191] device veth0_vlan entered promiscuous mode [ 55.878307][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.887411][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.897161][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.908185][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.929833][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.939387][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.949760][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.963521][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.975241][ T4188] device veth0_macvtap entered promiscuous mode [ 55.988878][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.998885][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.007981][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.017878][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.037283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.046882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.054905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.070159][ T4188] device veth1_macvtap entered promiscuous mode [ 56.084040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.097638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.105922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.118075][ T4191] device veth1_vlan entered promiscuous mode [ 56.136238][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.147201][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.159968][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.168761][ T4183] device veth0_vlan entered promiscuous mode [ 56.175836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.184284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.192267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.199897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.208834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.225170][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.241840][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.253570][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.266220][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.297974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.307559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.318085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.329796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.338678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.347666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.357103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.366700][ T4183] device veth1_vlan entered promiscuous mode [ 56.391509][ T4191] device veth0_macvtap entered promiscuous mode [ 56.404193][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.415731][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.424911][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.434278][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.450092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.459811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.467994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.507708][ T4182] device veth0_vlan entered promiscuous mode [ 56.514570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.523755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.532755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.541960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.556140][ T4191] device veth1_macvtap entered promiscuous mode [ 56.568149][ T4183] device veth0_macvtap entered promiscuous mode [ 56.586984][ T4182] device veth1_vlan entered promiscuous mode [ 56.595788][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.604143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.610622][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.615235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.627430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.636341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.644928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.660241][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.673888][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.683982][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.694963][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.706129][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.716525][ T4183] device veth1_macvtap entered promiscuous mode [ 56.746349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.754819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.763343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.772941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.786724][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.797478][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.807651][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.818358][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.829967][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.846279][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.860954][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.866003][ T4182] device veth0_macvtap entered promiscuous mode [ 56.879577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.895307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.904347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.912845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.921927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.930429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.951702][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.960428][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.978911][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.987959][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.016084][ T4182] device veth1_macvtap entered promiscuous mode [ 57.034104][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.045035][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.057853][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.069116][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.079213][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.089945][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.102492][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.147321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.155734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.174242][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 57.187232][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 57.189705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.200929][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 57.211770][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.224915][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236534][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.247875][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.258611][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 57.264884][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 57.270644][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.283714][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.300261][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.317761][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.338929][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.359961][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.369892][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.379936][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.391111][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.400983][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.412029][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.422409][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.433480][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.445360][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.453205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.462337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.471629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.479417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.488617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.501004][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.509709][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.518618][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.527666][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.763027][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.771250][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.069318][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.094590][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.383414][ T4297] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.392413][ T4297] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.401810][ T4297] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.410924][ T4297] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.492461][ T4297] syz.1.6 (4297) used greatest stack depth: 20800 bytes left [ 58.493928][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.510735][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.521911][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.532642][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.542517][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.552971][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.564198][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.598303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.631548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.659778][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.670023][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.681074][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.689789][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.712950][ T4308] Cannot find add_set index 1 as target [ 58.724043][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.747813][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.765827][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.819938][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.879617][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.893888][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 58.936845][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.942506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.950312][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.983659][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.995183][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.000599][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.016349][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.059013][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.073475][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.086357][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.122291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.122495][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.146571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.188524][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.213538][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.239622][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.251338][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 59.264029][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 59.270124][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 59.283297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.309354][ T4316] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 59.332545][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 59.350446][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 59.407931][ T4321] device syzkaller0 entered promiscuous mode [ 59.629322][ T4334] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 59.718921][ T4339] device bridge1 entered promiscuous mode [ 59.775138][ T4342] can: request_module (can-proto-5) failed. [ 59.834167][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 59.843269][ T4337] device bridge_slave_1 left promiscuous mode [ 59.850832][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.866533][ T4337] device bridge_slave_0 left promiscuous mode [ 59.872983][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.270352][ T4352] device syzkaller0 entered promiscuous mode [ 60.401812][ T4355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 60.693232][ T4376] netlink: 'syz.0.24': attribute type 12 has an invalid length. [ 60.815438][ T4385] sctp: [Deprecated]: syz.1.26 (pid 4385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.815438][ T4385] Use struct sctp_sack_info instead [ 60.917295][ T4384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 61.096704][ T4395] tipc: Started in network mode [ 61.102487][ T4395] tipc: Node identity ee9dad7c9e35, cluster identity 4711 [ 61.117080][ T4395] tipc: Enabled bearer , priority 0 [ 61.146471][ T4395] device syzkaller0 entered promiscuous mode [ 61.177270][ T4395] tipc: Resetting bearer [ 61.186979][ T4394] tipc: Resetting bearer [ 61.200865][ T4394] tipc: Disabling bearer [ 61.228270][ T4399] tipc: Started in network mode [ 61.245011][ T4399] tipc: Node identity d2037dada43e, cluster identity 4711 [ 61.268309][ T4399] tipc: Enabled bearer , priority 0 [ 61.276272][ T4399] device syzkaller0 entered promiscuous mode [ 61.344253][ T4399] tipc: Resetting bearer [ 61.364040][ T4396] tipc: Resetting bearer [ 61.398709][ T4396] tipc: Disabling bearer [ 61.442967][ T4407] device dummy0 entered promiscuous mode [ 61.456424][ T4407] device vlan2 entered promiscuous mode [ 61.670779][ T4422] tipc: Enabled bearer , priority 0 [ 61.722281][ T4429] device syzkaller0 entered promiscuous mode [ 61.966709][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.998418][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.021319][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.047563][ T4428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.127957][ T4438] tipc: Resetting bearer [ 62.175835][ T4447] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 62.187352][ T4420] tipc: Resetting bearer [ 62.215218][ T4420] tipc: Disabling bearer [ 62.364974][ T4455] tipc: Enabled bearer , priority 0 [ 62.392109][ T4455] device syzkaller0 entered promiscuous mode [ 62.447955][ T4455] tipc: Resetting bearer [ 62.483597][ T4454] tipc: Resetting bearer [ 62.519628][ T4454] tipc: Disabling bearer [ 63.003762][ T4481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.079546][ T4487] device syzkaller0 entered promiscuous mode [ 63.170688][ T4493] Zero length message leads to an empty skb [ 63.701047][ T4497] tipc: Started in network mode [ 63.706057][ T4497] tipc: Node identity ce8e455be9f2, cluster identity 4711 [ 63.742813][ T4497] tipc: Enabled bearer , priority 0 [ 63.765489][ T4496] device syzkaller0 entered promiscuous mode [ 63.852170][ T4496] tipc: Resetting bearer [ 63.910871][ T4495] tipc: Resetting bearer [ 64.017491][ T4495] tipc: Disabling bearer [ 64.701785][ T4517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.756423][ T4519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 64.976571][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.810934][ T4226] Bluetooth: hci4: command 0x0405 tx timeout [ 66.604271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.661281][ T4577] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.039335][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.048508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.406693][ T4559] ODEBUG: Out of memory. ODEBUG disabled [ 68.243203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.260552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 68.269479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 68.278454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.287460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.296464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.305374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.030517][ C1] sched: RT throttling activated [ 70.027938][ T4590] ALSA: mixer_oss: invalid OSS volume '' [ 70.485685][ T4590] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.492439][ T4590] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.509679][ T4590] vhci_hcd vhci_hcd.0: Device attached [ 70.606722][ T4591] vhci_hcd: connection closed [ 70.608524][ T4509] vhci_hcd: stop threads [ 70.624749][ T4509] vhci_hcd: release socket [ 70.643697][ T4509] vhci_hcd: disconnect device [ 70.711099][ T4172] vhci_hcd: vhci_device speed not set [ 71.255944][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.262617][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.744863][ T4611] tipc: Started in network mode [ 71.760034][ T4611] tipc: Node identity ced4d2241eba, cluster identity 4711 [ 71.790494][ T4611] tipc: Enabled bearer , priority 0 [ 71.810258][ T4615] device syzkaller0 entered promiscuous mode [ 71.908042][ T4611] tipc: Resetting bearer [ 72.000806][ T4609] tipc: Resetting bearer [ 72.026811][ T4609] tipc: Disabling bearer [ 72.239940][ T26] audit: type=1326 audit(1764121279.065:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c871b749 code=0x7ffc0000 [ 72.301505][ T26] audit: type=1326 audit(1764121279.095:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 72.433893][ T26] audit: type=1326 audit(1764121279.095:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 72.718319][ T26] audit: type=1326 audit(1764121279.095:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 72.843190][ T26] audit: type=1326 audit(1764121279.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 72.989858][ T26] audit: type=1326 audit(1764121279.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 73.035299][ T26] audit: type=1326 audit(1764121279.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 73.241620][ T26] audit: type=1326 audit(1764121279.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 76.140039][ T26] audit: type=1326 audit(1764121279.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 76.166937][ T26] audit: type=1326 audit(1764121279.095:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7c86b7829 code=0x7ffc0000 [ 76.396800][ T21] cfg80211: failed to load regulatory.db [ 78.786111][ T4673] tipc: Enabled bearer , priority 0 [ 78.911639][ T4673] device syzkaller0 entered promiscuous mode [ 79.089958][ T4673] tipc: Resetting bearer [ 79.112007][ T4672] tipc: Resetting bearer [ 79.141340][ T4672] tipc: Disabling bearer [ 79.309627][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 79.309642][ T26] audit: type=1326 audit(1764121286.135:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676808c749 code=0x0 [ 79.668864][ T4701] mkiss: ax0: crc mode is auto. [ 80.382505][ T4716] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.596945][ T4559] Set syz1 is full, maxelem 65536 reached [ 81.110834][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.370609][ T4226] usb 5-1: Using ep0 maxpacket: 8 [ 81.403319][ T4738] tipc: Enabled bearer , priority 0 [ 81.420686][ T4738] device syzkaller0 entered promiscuous mode [ 81.477324][ T4737] tipc: Resetting bearer [ 81.520875][ T4226] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.585086][ T4226] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.598809][ T4226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.612992][ T4226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.628072][ T4226] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.648233][ T4226] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.652124][ T4737] tipc: Disabling bearer [ 81.658845][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.806653][ T4742] tipc: Enabled bearer , priority 0 [ 81.814313][ T4199] Bluetooth: hci2: Unknown advertising packet type: 0x6678 [ 81.814361][ T4199] Bluetooth: hci2: Unknown advertising packet type: 0xfe00 [ 81.822102][ T4199] ================================================================== [ 81.837545][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 81.845340][ T4199] Read of size 1 at addr ffff88807ecbe404 by task kworker/u5:8/4199 [ 81.853296][ T4199] [ 81.855608][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 81.863137][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.873198][ T4199] Workqueue: hci2 hci_rx_work [ 81.877877][ T4199] Call Trace: [ 81.881484][ T4199] [ 81.884397][ T4199] dump_stack_lvl+0x168/0x230 [ 81.889061][ T4199] ? show_regs_print_info+0x20/0x20 [ 81.894265][ T4199] ? load_image+0x3b0/0x3b0 [ 81.898757][ T4199] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 81.904222][ T4199] print_address_description+0x60/0x2d0 [ 81.909774][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 81.914900][ T4199] kasan_report+0xdf/0x130 [ 81.919306][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 81.924406][ T4199] hci_le_meta_evt+0x12c0/0x3b80 [ 81.929341][ T4199] ? hci_event_packet+0x2a0/0x12f0 [ 81.934446][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 81.940501][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 81.946152][ T4199] ? mark_lock+0x94/0x320 [ 81.950470][ T4199] ? mutex_unlock+0x10/0x10 [ 81.954953][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 81.960919][ T4199] ? lock_chain_count+0x20/0x20 [ 81.965754][ T4199] ? __rwlock_init+0x140/0x140 [ 81.970499][ T4199] hci_event_packet+0xe05/0x12f0 [ 81.975433][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 81.980620][ T4199] ? rcu_lock_release+0x20/0x20 [ 81.985462][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 81.990648][ T4199] hci_rx_work+0x255/0xa10 [ 81.995055][ T4199] process_one_work+0x863/0x1000 [ 81.999979][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 82.005598][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 82.010867][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 82.015869][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 82.021221][ T4199] ? wq_worker_running+0x97/0x170 [ 82.026227][ T4199] worker_thread+0xaa8/0x12a0 [ 82.030889][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 82.036759][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 82.041950][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 82.047144][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.053020][ T4199] kthread+0x436/0x520 [ 82.057067][ T4199] ? rcu_lock_release+0x20/0x20 [ 82.061894][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 82.066472][ T4199] ret_from_fork+0x1f/0x30 [ 82.070929][ T4199] [ 82.073937][ T4199] [ 82.076240][ T4199] Allocated by task 4744: [ 82.080558][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 82.085579][ T4199] __alloc_skb+0x22c/0x750 [ 82.089991][ T4199] vhci_write+0xbc/0x450 [ 82.094214][ T4199] vfs_write+0x712/0xd00 [ 82.098438][ T4199] ksys_write+0x14d/0x250 [ 82.102744][ T4199] do_syscall_64+0x4c/0xa0 [ 82.107140][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.113014][ T4199] [ 82.115320][ T4199] The buggy address belongs to the object at ffff88807ecbe000 [ 82.115320][ T4199] which belongs to the cache kmalloc-1k of size 1024 [ 82.129348][ T4199] The buggy address is located 4 bytes to the right of [ 82.129348][ T4199] 1024-byte region [ffff88807ecbe000, ffff88807ecbe400) [ 82.143061][ T4199] The buggy address belongs to the page: [ 82.148695][ T4199] page:ffffea0001fb2e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ecb8 [ 82.158850][ T4199] head:ffffea0001fb2e00 order:3 compound_mapcount:0 compound_pincount:0 [ 82.167184][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 82.175248][ T4199] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016841dc0 [ 82.183852][ T4199] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 82.192421][ T4199] page dumped because: kasan: bad access detected [ 82.198824][ T4199] page_owner tracks the page as allocated [ 82.204518][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13, ts 58788940323, free_ts 58609194299 [ 82.224203][ T4199] get_page_from_freelist+0x1b77/0x1c60 [ 82.229841][ T4199] __alloc_pages+0x1e1/0x470 [ 82.234764][ T4199] new_slab+0xc0/0x4b0 [ 82.238820][ T4199] ___slab_alloc+0x81e/0xdf0 [ 82.243399][ T4199] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 82.249187][ T4199] __alloc_skb+0x22c/0x750 [ 82.253592][ T4199] inet6_rt_notify+0xdd/0x290 [ 82.258258][ T4199] fib6_add+0x1d3b/0x3d30 [ 82.262579][ T4199] ip6_ins_rt+0xc5/0x110 [ 82.266862][ T4199] __ipv6_ifa_notify+0x4be/0xda0 [ 82.271850][ T4199] addrconf_dad_completed+0x179/0xca0 [ 82.277217][ T4199] addrconf_dad_work+0xc70/0x1520 [ 82.282220][ T4199] process_one_work+0x863/0x1000 [ 82.287138][ T4199] worker_thread+0xaa8/0x12a0 [ 82.291884][ T4199] kthread+0x436/0x520 [ 82.295972][ T4199] ret_from_fork+0x1f/0x30 [ 82.300369][ T4199] page last free stack trace: [ 82.305018][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 82.310458][ T4199] free_unref_page+0x94/0x280 [ 82.315120][ T4199] qlist_free_all+0x35/0x90 [ 82.319610][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 82.325138][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 82.329973][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 82.335061][ T4199] kmem_cache_alloc+0x100/0x290 [ 82.339890][ T4199] alloc_buffer_head+0x21/0x100 [ 82.344716][ T4199] alloc_page_buffers+0x341/0x600 [ 82.349725][ T4199] create_empty_buffers+0x3a/0x6d0 [ 82.354840][ T4199] create_page_buffers+0x1c4/0x320 [ 82.359960][ T4199] __block_write_begin_int+0x248/0x15a0 [ 82.365590][ T4199] block_page_mkwrite+0x210/0x280 [ 82.370599][ T4199] ext4_page_mkwrite+0x9de/0x1240 [ 82.375624][ T4199] do_page_mkwrite+0x168/0x3c0 [ 82.380385][ T4199] handle_mm_fault+0x1d48/0x43b0 [ 82.385333][ T4199] [ 82.387642][ T4199] Memory state around the buggy address: [ 82.393256][ T4199] ffff88807ecbe300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.401297][ T4199] ffff88807ecbe380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.409348][ T4199] >ffff88807ecbe400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.417394][ T4199] ^ [ 82.421485][ T4199] ffff88807ecbe480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.429526][ T4199] ffff88807ecbe500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.437566][ T4199] ================================================================== [ 82.445606][ T4199] Disabling lock debugging due to kernel taint [ 82.459005][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.466217][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 82.475134][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.485193][ T4199] Workqueue: hci2 hci_rx_work [ 82.489876][ T4199] Call Trace: [ 82.493138][ T4199] [ 82.496061][ T4199] dump_stack_lvl+0x168/0x230 [ 82.500723][ T4199] ? show_regs_print_info+0x20/0x20 [ 82.505915][ T4199] ? load_image+0x3b0/0x3b0 [ 82.510595][ T4199] panic+0x2c9/0x7f0 [ 82.510614][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 82.518968][ T4199] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 82.524838][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 82.529673][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 82.534775][ T4199] check_panic_on_warn+0x80/0xa0 [ 82.539717][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 82.544810][ T4199] end_report+0x6d/0xf0 [ 82.548951][ T4199] kasan_report+0x102/0x130 [ 82.553546][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 82.558661][ T4199] hci_le_meta_evt+0x12c0/0x3b80 [ 82.563601][ T4199] ? hci_event_packet+0x2a0/0x12f0 [ 82.568716][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 82.574775][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 82.580399][ T4199] ? mark_lock+0x94/0x320 [ 82.584709][ T4199] ? mutex_unlock+0x10/0x10 [ 82.589220][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.595212][ T4199] ? lock_chain_count+0x20/0x20 [ 82.600047][ T4199] ? __rwlock_init+0x140/0x140 [ 82.604792][ T4199] hci_event_packet+0xe05/0x12f0 [ 82.609709][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 82.614898][ T4199] ? rcu_lock_release+0x20/0x20 [ 82.619738][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 82.624924][ T4199] hci_rx_work+0x255/0xa10 [ 82.629342][ T4199] process_one_work+0x863/0x1000 [ 82.634261][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 82.639872][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 82.645141][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 82.650160][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 82.655520][ T4199] ? wq_worker_running+0x97/0x170 [ 82.660527][ T4199] worker_thread+0xaa8/0x12a0 [ 82.665201][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 82.671072][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 82.676250][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 82.681429][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.687307][ T4199] kthread+0x436/0x520 [ 82.691367][ T4199] ? rcu_lock_release+0x20/0x20 [ 82.696194][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 82.700775][ T4199] ret_from_fork+0x1f/0x30 [ 82.705185][ T4199] [ 82.708436][ T4199] Kernel Offset: disabled [ 82.712759][ T4199] Rebooting in 86400 seconds..