last executing test programs: 3.255973803s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000104000000000000000000000000000001000107144e230005000000003a000000204629f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x5a, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="04", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r1], 0x140}, 0x1, 0x0, 0x0, 0x24004080}, 0x844) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x81) socket$inet6_udp(0xa, 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 3.225320294s ago: executing program 2 (id=3): unshare(0x2020480) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000010203", 0x7}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r1, 0x2ea31}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.145659576s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) set_mempolicy(0x4005, 0x0, 0x8) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0xc0) prlimit64(0x0, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) poll(0x0, 0x0, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475"], 0x4000) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2.947722972s ago: executing program 1 (id=2): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0xfff, 0x6, 0xffffffffffffffff, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.898437254s ago: executing program 2 (id=6): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "e7edd2b6546915b10ec01f9c15c9b47ed21387cd60198a3a0a1b3f54"}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.187080235s ago: executing program 1 (id=7): r0 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x81) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock m'], 0xe) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0xb3d476b489f47a5f) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r7, &(0x7f0000000500)={0x3, 0x100000001, 0x0, 0x7}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'wlan0\x00', @local}) 2.145457816s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.965592691s ago: executing program 4 (id=5): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="90600400089b000008000300", @ANYRES32=r2, @ANYBLOB="54001280080001006774700048000280080004000100000014000800fe88000000000000000000000000010108000700ac1414aa08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 1.801178026s ago: executing program 1 (id=9): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.733608288s ago: executing program 1 (id=10): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x140}}, 0x844) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff2f, 0x2, 0x2, 0x18, 0x3, 0xf0a6}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc5}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x114435b29ef03429}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, 0x0, 0x0) 1.732395878s ago: executing program 4 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1.630801081s ago: executing program 4 (id=12): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.112402617s ago: executing program 0 (id=13): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x90}], 0x1, 0x40002122, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 859.354324ms ago: executing program 3 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000004000000000000000170100"], 0x58, 0x20000000}, 0x4000040) 557.680544ms ago: executing program 3 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 269.093432ms ago: executing program 0 (id=16): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0xfff, 0x6, 0xffffffffffffffff, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 235.920203ms ago: executing program 3 (id=17): socket$kcm(0x23, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 125.578357ms ago: executing program 1 (id=18): bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) set_mempolicy(0x4005, 0x0, 0x8) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0xc0) prlimit64(0x0, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) poll(0x0, 0x0, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475"], 0x4000) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 116.938487ms ago: executing program 0 (id=19): r0 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x81) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock m'], 0xe) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0xb3d476b489f47a5f) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r7, &(0x7f0000000500)={0x3, 0x100000001, 0x0, 0x7}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'wlan0\x00', @local}) 0s ago: executing program 3 (id=20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 61.315906][ T4174] cgroup: Unknown subsys name 'net' [ 61.425776][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.894825][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.986231][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 65.046065][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 65.094608][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.182376][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.192385][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.251213][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259167][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.268042][ T4201] device bridge_slave_0 entered promiscuous mode [ 65.282208][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.289720][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.298201][ T4201] device bridge_slave_1 entered promiscuous mode [ 65.311088][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.318352][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.326857][ T4199] device bridge_slave_0 entered promiscuous mode [ 65.341766][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.349090][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.357669][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.371956][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.379303][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.387642][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.408410][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.415503][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.423610][ T4199] device bridge_slave_1 entered promiscuous mode [ 65.453880][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.465981][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.514250][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.538894][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.556844][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.566415][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.573488][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.582261][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.592298][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.604328][ T4201] team0: Port device team_slave_0 added [ 65.624346][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.631540][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.639805][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.661018][ T4201] team0: Port device team_slave_1 added [ 65.667300][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.674375][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.682590][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.700446][ T4189] team0: Port device team_slave_0 added [ 65.726095][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.733198][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.741443][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.757901][ T4189] team0: Port device team_slave_1 added [ 65.765957][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.777163][ T4199] team0: Port device team_slave_0 added [ 65.784589][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.821610][ T4199] team0: Port device team_slave_1 added [ 65.835077][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.842209][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.868244][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.882059][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.911993][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.919960][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.945981][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.957860][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.964831][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.990856][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.004017][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.013632][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.020874][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.046871][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.060667][ T4187] team0: Port device team_slave_0 added [ 66.067259][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.074229][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.100236][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.129332][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.136613][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.162655][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.175282][ T4187] team0: Port device team_slave_1 added [ 66.198838][ T4188] team0: Port device team_slave_0 added [ 66.207593][ T4188] team0: Port device team_slave_1 added [ 66.228066][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.235051][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.261811][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.301747][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.309020][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.335087][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.347156][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.354131][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.380157][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.409215][ T4199] device hsr_slave_0 entered promiscuous mode [ 66.416342][ T4199] device hsr_slave_1 entered promiscuous mode [ 66.438191][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.445043][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.451904][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.459900][ T4189] Cannot create hsr debugfs directory [ 66.466241][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.473208][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.499161][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.528630][ T4201] device hsr_slave_0 entered promiscuous mode [ 66.535439][ T4201] device hsr_slave_1 entered promiscuous mode [ 66.542364][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.550046][ T4201] Cannot create hsr debugfs directory [ 66.630632][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.637603][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.644576][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.652442][ T4187] Cannot create hsr debugfs directory [ 66.693200][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.700459][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 66.706645][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 66.708007][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 66.719774][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.726090][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 66.732170][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 66.732385][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.746069][ T4188] Cannot create hsr debugfs directory [ 67.024613][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.036862][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.052885][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.066716][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.102574][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.134279][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.143282][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.155022][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.232826][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.243590][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.253520][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.264317][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.302143][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.321721][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.358238][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.368472][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.378096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.388765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.415058][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.422628][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.446706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.457266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.467632][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.474904][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.486701][ T4201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.504162][ T4201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.521916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.530701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.540864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.549768][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.556909][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.576212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.586468][ T4201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.600619][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.616757][ T4201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.637842][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.670785][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.678435][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.688065][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.696153][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.705013][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.714669][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.726746][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.736084][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.767943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.777482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.806638][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.818272][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.828058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.837085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.845442][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.852562][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.862255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.871970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.880936][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.888088][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.895988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.904600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.914986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.924568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.954589][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.968792][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.978314][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.990317][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.014522][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.033784][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.045496][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.065015][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.075199][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.086617][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.098681][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.110840][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.122359][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.134801][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.143922][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.152565][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.162055][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.170597][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.197433][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.209067][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.218644][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.225800][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.235027][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.247723][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.257209][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.264295][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.281492][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.325865][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.333994][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.345250][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.365023][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.378697][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.394602][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.404053][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.413582][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.428857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.438162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.462752][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.493352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.501803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.510522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.520625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.530200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.539364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.548447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.557858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.567186][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.574277][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.583864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.593043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.602221][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.609350][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.619314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.638343][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.652755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.661942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.671718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.682421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.699230][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.708521][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.730576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.740133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.750533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.760599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.770659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.778219][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 68.780767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.784324][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 68.798231][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 68.806848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.810111][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 68.823879][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 68.834240][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.853419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.864811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.880144][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.887319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.904027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.912805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.921941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.930635][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.937751][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.954614][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.971096][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.007044][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.015535][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.026039][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.035457][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.044236][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.053396][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.063081][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.072308][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.112326][ T4189] device veth0_vlan entered promiscuous mode [ 69.123900][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.134143][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.145488][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.160971][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.172206][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.190176][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.201789][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.214218][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.224430][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.233849][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.248296][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.261199][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.311957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.323671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.339998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.352729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.363909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.378558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.387157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.394637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.404862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.415535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.426853][ T4189] device veth1_vlan entered promiscuous mode [ 69.435516][ T4199] device veth0_vlan entered promiscuous mode [ 69.448124][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.471082][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.485432][ T4199] device veth1_vlan entered promiscuous mode [ 69.533049][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.556334][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.565391][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.574497][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.589950][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.601418][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.612302][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.635927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.644698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.667146][ T4199] device veth0_macvtap entered promiscuous mode [ 69.681140][ T4188] device veth0_vlan entered promiscuous mode [ 69.691640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.703738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.715482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.730920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.743965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.755376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.767413][ T4189] device veth0_macvtap entered promiscuous mode [ 69.794434][ T4188] device veth1_vlan entered promiscuous mode [ 69.802222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.812006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.821722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.830511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.839851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.853956][ T4189] device veth1_macvtap entered promiscuous mode [ 69.873619][ T4199] device veth1_macvtap entered promiscuous mode [ 69.891026][ T4187] device veth0_vlan entered promiscuous mode [ 69.911689][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.920077][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.929745][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.939819][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.948430][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.957687][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.966559][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.974011][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.983624][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.993393][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.002477][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.011410][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.026530][ T4187] device veth1_vlan entered promiscuous mode [ 70.040187][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.054347][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.070459][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.083033][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.100731][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.123550][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.141621][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.153393][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.163402][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.172972][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.182173][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.194422][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.205706][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.214462][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.224306][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.243818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.252783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.271345][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.281991][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.297857][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.325328][ T4187] device veth0_macvtap entered promiscuous mode [ 70.340675][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.350084][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.360066][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.371686][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.380804][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.392870][ T4188] device veth0_macvtap entered promiscuous mode [ 70.406708][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.415461][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.431240][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.440204][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454479][ T4187] device veth1_macvtap entered promiscuous mode [ 70.469747][ T4188] device veth1_macvtap entered promiscuous mode [ 70.550435][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.568562][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.580990][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.591683][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.603059][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.630770][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.647300][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.659897][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.671064][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681219][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.691828][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.703445][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.722690][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.736419][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.746400][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.756998][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.768399][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.777752][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.786818][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.794929][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.803853][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.813552][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.822590][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.831986][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.842221][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.853265][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.864596][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 70.870973][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 70.877209][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 70.881049][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.883432][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 70.899407][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 70.906391][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.917016][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.927043][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.938346][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.950890][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.965236][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.977751][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.986858][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.995640][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016278][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.025029][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.036485][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045220][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.055402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.064567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.073750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.082705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.144971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.154876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.164315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.173706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.188525][ T4201] device veth0_vlan entered promiscuous mode [ 71.217945][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.230254][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.266258][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272832][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285929][ T4201] device veth1_vlan entered promiscuous mode [ 71.304897][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.314871][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.337209][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.345086][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.380061][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.402513][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.414259][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.444746][ T4201] device veth0_macvtap entered promiscuous mode [ 71.455515][ T4201] device veth1_macvtap entered promiscuous mode [ 71.465250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.474499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.483524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.493008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.504845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.539431][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.550382][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.571578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.587443][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.598708][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.609285][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.620842][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.630962][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.642168][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.652720][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.664648][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.677603][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.687437][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.695295][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.708136][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.721831][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.733166][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.743521][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.753923][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.762959][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.775303][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.786150][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.797977][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.808615][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.819415][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.830544][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.840684][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.851448][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.863407][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.885698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.908358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.944658][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.954001][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.962820][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.971400][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.981028][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.990248][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.007556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.059506][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.088204][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.161554][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.188941][ T4270] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 72.255430][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.297728][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.317314][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.487488][ T4273] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 72.507495][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.975746][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.983730][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.041715][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 73.056341][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 73.063243][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.066329][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 73.094101][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 73.124732][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 73.133311][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 73.187544][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.215960][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.244778][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.257097][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.283933][ T4231] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.296622][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.357332][ T4231] usb 4-1: config 0 descriptor?? [ 73.384065][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.405468][ T4296] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 73.405879][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.529333][ T4289] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.558829][ T4289] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.642422][ T4271] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.794970][ T4308] IPVS: sh: FWM 3 0x00000003 - no destination available [ 73.811096][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 73.965816][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 73.966003][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 73.985368][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 73.995762][ T4266] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.004523][ T4231] usb 4-1: USB disconnect, device number 2 [ 74.015506][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.036998][ T21] usb 3-1: Product: syz [ 74.085868][ T21] usb 3-1: Manufacturer: syz [ 74.102618][ T21] usb 3-1: SerialNumber: syz [ 74.248053][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 74.266362][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.297833][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 74.383884][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.435875][ T4266] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 74.595870][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 74.635963][ T4266] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 74.645290][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.655898][ T4266] usb 5-1: Product: syz [ 74.660115][ T4266] usb 5-1: Manufacturer: syz [ 74.664885][ T4266] usb 5-1: SerialNumber: syz [ 74.696070][ T4266] usb 5-1: config 0 descriptor?? [ 74.740573][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 74.762798][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.773441][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.785493][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.808628][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.124682][ T4323] ======================================================= [ 75.124682][ T4323] WARNING: The mand mount option has been deprecated and [ 75.124682][ T4323] and is ignored by this kernel. Remove the mand [ 75.124682][ T4323] option from the mount to silence this warning. [ 75.124682][ T4323] ======================================================= [ 75.220695][ T4328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.249038][ T4323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.337963][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 75.349726][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 75.357326][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.367586][ T4205] Workqueue: hci3 hci_rx_work [ 75.372322][ T4205] Call Trace: [ 75.375608][ T4205] [ 75.378554][ T4205] dump_stack_lvl+0x188/0x250 [ 75.383233][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 75.388875][ T4205] ? show_regs_print_info+0x20/0x20 [ 75.394073][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 75.399727][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 75.404844][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 75.409521][ T4205] ? process_one_work+0x85f/0x1010 [ 75.414632][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 75.419836][ T4205] kobject_add_internal+0x6e0/0xd90 [ 75.425043][ T4205] kobject_add+0x160/0x230 [ 75.425671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.429470][ T4205] ? kobject_init+0x1d0/0x1d0 [ 75.443085][ T4205] ? klist_children_get+0x50/0x50 [ 75.445640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.448116][ T4205] ? get_device_parent+0x121/0x3f0 [ 75.462258][ T4205] device_add+0x483/0xfb0 [ 75.465656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.466614][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 75.475658][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.480483][ T4205] le_conn_complete_evt+0xc48/0x15c0 [ 75.489471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.494716][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 75.503696][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.508742][ T4205] ? __mutex_trylock_common+0x155/0x260 [ 75.523212][ T4205] hci_le_meta_evt+0x285/0x3c90 [ 75.525661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.528073][ T4205] ? hci_event_packet+0x37b/0x1370 [ 75.537076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.542118][ T4205] ? __lock_acquire+0x7d10/0x7d10 [ 75.551103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.556067][ T4205] ? release_firmware_map_entry+0x190/0x190 [ 75.565062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.570897][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 75.585894][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.591527][ T4205] ? mark_lock+0x94/0x320 [ 75.595854][ T4205] ? mutex_unlock+0x10/0x10 [ 75.600357][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 75.606344][ T4205] ? lock_chain_count+0x20/0x20 [ 75.611198][ T4205] ? __rwlock_init+0x140/0x140 [ 75.615966][ T4205] hci_event_packet+0xe48/0x1370 [ 75.620899][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 75.626098][ T4205] ? rcu_lock_release+0x20/0x20 [ 75.630944][ T4205] ? lock_acquire+0x208/0x400 [ 75.635635][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.640846][ T4205] hci_rx_work+0x255/0xa10 [ 75.645269][ T4205] process_one_work+0x85f/0x1010 [ 75.650215][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 75.655846][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 75.661138][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.666246][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.671801][ T4205] ? wq_worker_running+0x97/0x170 [ 75.676826][ T4205] worker_thread+0xaa6/0x1290 [ 75.681512][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 75.686732][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 75.692632][ T4205] kthread+0x436/0x520 [ 75.696696][ T4205] ? rcu_lock_release+0x20/0x20 [ 75.701543][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 75.706128][ T4205] ret_from_fork+0x1f/0x30 [ 75.710551][ T4205] [ 76.193642][ T4205] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.206985][ T4205] Bluetooth: hci3: failed to register connection device [ 76.219561][ T4205] ================================================================== [ 76.228054][ T4205] BUG: KASAN: use-after-free in l2cap_sock_ready_cb+0xd3/0x140 [ 76.235649][ T4205] Read of size 8 at addr ffff88807c8bd4c8 by task kworker/u5:7/4205 [ 76.243656][ T4205] [ 76.245992][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 76.253573][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.263648][ T4205] Workqueue: hci3 hci_rx_work [ 76.268346][ T4205] Call Trace: [ 76.271644][ T4205] [ 76.274579][ T4205] dump_stack_lvl+0x188/0x250 [ 76.279269][ T4205] ? show_regs_print_info+0x20/0x20 [ 76.284477][ T4205] ? load_image+0x400/0x400 [ 76.289006][ T4205] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 76.294511][ T4205] ? rcu_lock_release+0x5/0x20 [ 76.299299][ T4205] print_address_description+0x60/0x2d0 [ 76.304925][ T4205] ? l2cap_sock_ready_cb+0xd3/0x140 [ 76.310369][ T4205] kasan_report+0xdf/0x130 [ 76.314826][ T4205] ? l2cap_sock_ready_cb+0xd3/0x140 [ 76.320038][ T4205] l2cap_sock_ready_cb+0xd3/0x140 [ 76.325073][ T4205] l2cap_le_start+0x73b/0x1710 [ 76.329867][ T4205] ? l2cap_start_connection+0x5b0/0x5b0 [ 76.335447][ T4205] ? l2cap_conn_del+0x6a0/0x6a0 [ 76.340299][ T4205] ? __l2cap_chan_add+0x4a3/0x930 [ 76.345331][ T4205] l2cap_connect_cfm+0x6d7/0x10f0 [ 76.350380][ T4205] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 76.355694][ T4205] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 76.360982][ T4205] le_conn_complete_evt+0xd42/0x15c0 [ 76.366299][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 76.371441][ T4205] ? __mutex_trylock_common+0x155/0x260 [ 76.376997][ T4205] hci_le_meta_evt+0x285/0x3c90 [ 76.381859][ T4205] ? hci_event_packet+0x37b/0x1370 [ 76.386991][ T4205] ? __lock_acquire+0x7d10/0x7d10 [ 76.392057][ T4205] ? release_firmware_map_entry+0x190/0x190 [ 76.397979][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 76.404109][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 76.409754][ T4205] ? mark_lock+0x94/0x320 [ 76.414113][ T4205] ? mutex_unlock+0x10/0x10 [ 76.418625][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 76.424620][ T4205] ? lock_chain_count+0x20/0x20 [ 76.429485][ T4205] ? __rwlock_init+0x140/0x140 [ 76.434254][ T4205] hci_event_packet+0xe48/0x1370 [ 76.439221][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 76.444430][ T4205] ? rcu_lock_release+0x20/0x20 [ 76.449287][ T4205] ? lock_acquire+0x208/0x400 [ 76.453989][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 76.459341][ T4205] hci_rx_work+0x255/0xa10 [ 76.463797][ T4205] process_one_work+0x85f/0x1010 [ 76.468770][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 76.474409][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 76.479705][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 76.484758][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 76.490327][ T4205] ? wq_worker_running+0x97/0x170 [ 76.495355][ T4205] worker_thread+0xaa6/0x1290 [ 76.500059][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 76.505301][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 76.511267][ T4205] kthread+0x436/0x520 [ 76.515352][ T4205] ? rcu_lock_release+0x20/0x20 [ 76.520208][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 76.524823][ T4205] ret_from_fork+0x1f/0x30 [ 76.529253][ T4205] [ 76.532269][ T4205] [ 76.534594][ T4205] Allocated by task 4331: [ 76.538915][ T4205] __kasan_kmalloc+0xb5/0xf0 [ 76.543523][ T4205] sk_prot_alloc+0xe7/0x210 [ 76.548050][ T4205] sk_alloc+0x2f/0x310 [ 76.552128][ T4205] l2cap_sock_alloc+0x33/0x200 [ 76.556926][ T4205] l2cap_sock_create+0x118/0x1d0 [ 76.561915][ T4205] bt_sock_create+0x155/0x220 [ 76.566598][ T4205] __sock_create+0x47b/0x900 [ 76.571216][ T4205] __sys_socket+0xe2/0x170 [ 76.575638][ T4205] __x64_sys_socket+0x76/0x80 [ 76.580352][ T4205] do_syscall_64+0x4c/0xa0 [ 76.584802][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.590717][ T4205] [ 76.593040][ T4205] Freed by task 4330: [ 76.597014][ T4205] kasan_set_track+0x4b/0x70 [ 76.601604][ T4205] kasan_set_free_info+0x1f/0x40 [ 76.606544][ T4205] ____kasan_slab_free+0xd5/0x110 [ 76.611566][ T4205] slab_free_freelist_hook+0xea/0x170 [ 76.616945][ T4205] kfree+0xef/0x2a0 [ 76.620799][ T4205] __sk_destruct+0x578/0x840 [ 76.625389][ T4205] l2cap_sock_release+0x169/0x1e0 [ 76.630668][ T4205] sock_close+0xd5/0x240 [ 76.634913][ T4205] __fput+0x234/0x930 [ 76.638904][ T4205] task_work_run+0x125/0x1a0 [ 76.643517][ T4205] exit_to_user_mode_loop+0x10f/0x130 [ 76.648989][ T4205] exit_to_user_mode_prepare+0xee/0x180 [ 76.654557][ T4205] syscall_exit_to_user_mode+0x16/0x40 [ 76.660028][ T4205] do_syscall_64+0x58/0xa0 [ 76.664443][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.670335][ T4205] [ 76.672665][ T4205] The buggy address belongs to the object at ffff88807c8bd000 [ 76.672665][ T4205] which belongs to the cache kmalloc-2k of size 2048 [ 76.686742][ T4205] The buggy address is located 1224 bytes inside of [ 76.686742][ T4205] 2048-byte region [ffff88807c8bd000, ffff88807c8bd800) [ 76.700293][ T4205] The buggy address belongs to the page: [ 76.705955][ T4205] page:ffffea0001f22e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c8b8 [ 76.716236][ T4205] head:ffffea0001f22e00 order:3 compound_mapcount:0 compound_pincount:0 [ 76.724565][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.732564][ T4205] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42000 [ 76.741193][ T4205] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 76.749769][ T4205] page dumped because: kasan: bad access detected [ 76.756192][ T4205] page_owner tracks the page as allocated [ 76.761898][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 23, ts 75178384349, free_ts 75158848830 [ 76.781658][ T4205] get_page_from_freelist+0x1bbd/0x1ca0 [ 76.787232][ T4205] __alloc_pages+0x1ee/0x480 [ 76.791824][ T4205] new_slab+0xc0/0x4b0 [ 76.795893][ T4205] ___slab_alloc+0x80a/0xdd0 [ 76.800505][ T4205] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 76.806310][ T4205] __alloc_skb+0x22c/0x750 [ 76.810731][ T4205] skb_copy+0x139/0x790 [ 76.814883][ T4205] mac80211_hwsim_tx_frame_no_nl+0xce0/0x1600 [ 76.821135][ T4205] mac80211_hwsim_tx+0x742/0xe20 [ 76.826089][ T4205] ieee80211_tx_frags+0x3f4/0x8d0 [ 76.831124][ T4205] __ieee80211_tx+0x21b/0x4e0 [ 76.835811][ T4205] ieee80211_tx+0x30f/0x460 [ 76.840340][ T4205] __ieee80211_subif_start_xmit+0x1036/0x3290 [ 76.846408][ T4205] ieee80211_subif_start_xmit+0xed/0x5d0 [ 76.852042][ T4205] dev_hard_start_xmit+0x2a5/0x7e0 [ 76.857172][ T4205] sch_direct_xmit+0x25a/0x4b0 [ 76.861957][ T4205] page last free stack trace: [ 76.866624][ T4205] free_unref_page_prepare+0x637/0x6c0 [ 76.872086][ T4205] free_unref_page+0x8f/0x2a0 [ 76.876777][ T4205] __unfreeze_partials+0x1a5/0x200 [ 76.881910][ T4205] put_cpu_partial+0x12d/0x190 [ 76.886682][ T4205] qlist_free_all+0x35/0x90 [ 76.891181][ T4205] kasan_quarantine_reduce+0x150/0x160 [ 76.896660][ T4205] __kasan_slab_alloc+0x2f/0xd0 [ 76.901514][ T4205] slab_post_alloc_hook+0x4c/0x380 [ 76.906625][ T4205] kmem_cache_alloc+0x100/0x290 [ 76.911475][ T4205] getname_flags+0xb5/0x500 [ 76.915989][ T4205] do_sys_openat2+0xdd/0x4b0 [ 76.920594][ T4205] __x64_sys_openat+0x135/0x160 [ 76.925461][ T4205] do_syscall_64+0x4c/0xa0 [ 76.929898][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.935800][ T4205] [ 76.938144][ T4205] Memory state around the buggy address: [ 76.943769][ T4205] ffff88807c8bd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.951827][ T4205] ffff88807c8bd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.959887][ T4205] >ffff88807c8bd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.967945][ T4205] ^ [ 76.974354][ T4205] ffff88807c8bd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.982426][ T4205] ffff88807c8bd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.990500][ T4205] ================================================================== [ 76.998571][ T4205] Disabling lock debugging due to kernel taint [ 77.020177][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.026920][ T4327] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 77.027524][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 77.043840][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.053926][ T4205] Workqueue: hci3 hci_rx_work [ 77.058633][ T4205] Call Trace: [ 77.061919][ T4205] [ 77.064862][ T4205] dump_stack_lvl+0x188/0x250 [ 77.069657][ T4205] ? show_regs_print_info+0x20/0x20 [ 77.074864][ T4205] ? load_image+0x400/0x400 [ 77.079379][ T4205] panic+0x2e5/0x810 [ 77.083288][ T4205] ? bpf_jit_dump+0xd0/0xd0 [ 77.087899][ T4205] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 77.093890][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 77.098753][ T4205] ? l2cap_sock_ready_cb+0xd3/0x140 [ 77.103968][ T4205] check_panic_on_warn+0x80/0xa0 [ 77.108918][ T4205] ? l2cap_sock_ready_cb+0xd3/0x140 [ 77.114132][ T4205] end_report+0x6d/0xf0 [ 77.118305][ T4205] kasan_report+0x102/0x130 [ 77.122823][ T4205] ? l2cap_sock_ready_cb+0xd3/0x140 [ 77.128034][ T4205] l2cap_sock_ready_cb+0xd3/0x140 [ 77.133071][ T4205] l2cap_le_start+0x73b/0x1710 [ 77.137858][ T4205] ? l2cap_start_connection+0x5b0/0x5b0 [ 77.143422][ T4205] ? l2cap_conn_del+0x6a0/0x6a0 [ 77.148278][ T4205] ? __l2cap_chan_add+0x4a3/0x930 [ 77.153340][ T4205] l2cap_connect_cfm+0x6d7/0x10f0 [ 77.158382][ T4205] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 77.163677][ T4205] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 77.168969][ T4205] le_conn_complete_evt+0xd42/0x15c0 [ 77.174269][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 77.179393][ T4205] ? __mutex_trylock_common+0x155/0x260 [ 77.184957][ T4205] hci_le_meta_evt+0x285/0x3c90 [ 77.189822][ T4205] ? hci_event_packet+0x37b/0x1370 [ 77.194942][ T4205] ? __lock_acquire+0x7d10/0x7d10 [ 77.199980][ T4205] ? release_firmware_map_entry+0x190/0x190 [ 77.205884][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 77.211963][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 77.217610][ T4205] ? mark_lock+0x94/0x320 [ 77.221947][ T4205] ? mutex_unlock+0x10/0x10 [ 77.226465][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 77.232456][ T4205] ? lock_chain_count+0x20/0x20 [ 77.237318][ T4205] ? __rwlock_init+0x140/0x140 [ 77.242096][ T4205] hci_event_packet+0xe48/0x1370 [ 77.247053][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 77.252269][ T4205] ? rcu_lock_release+0x20/0x20 [ 77.257130][ T4205] ? lock_acquire+0x208/0x400 [ 77.261821][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 77.267033][ T4205] hci_rx_work+0x255/0xa10 [ 77.271473][ T4205] process_one_work+0x85f/0x1010 [ 77.276425][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 77.282082][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 77.287376][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.292412][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 77.298081][ T4205] ? wq_worker_running+0x97/0x170 [ 77.303117][ T4205] worker_thread+0xaa6/0x1290 [ 77.307812][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 77.313019][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 77.318934][ T4205] kthread+0x436/0x520 [ 77.323012][ T4205] ? rcu_lock_release+0x20/0x20 [ 77.327872][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 77.332470][ T4205] ret_from_fork+0x1f/0x30 [ 77.336900][ T4205] [ 77.340207][ T4205] Kernel Offset: disabled [ 77.344582][ T4205] Rebooting in 86400 seconds..