last executing test programs: 4.167859215s ago: executing program 1 (id=399): accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 3.64499955s ago: executing program 4 (id=404): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syslog(0x3, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 3.483753137s ago: executing program 4 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x8633, 0x9, 0x1, 0xc0, 0x405, 0x4, 0x32, 0x89, 0x71f6139e, 0x7, 0x100000002, 0x6, 0x8, 0x7, 0xff, 0x20000000400eee0], 0xffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000001640)="8b", 0x1) 3.42419878s ago: executing program 3 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001580), 0x2040, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x20054081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x4, 0x1}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xd}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x4}}}, 0x3e) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f0000001600)=@broadcast, &(0x7f0000001e40)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xc4f}, @broadcast, @device_a, @initial, {0xf, 0xf}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x104, 0x9, @random=0xc, @void, @val={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0xa096, 0x6, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x401, 0x7}}, [{0xdd, 0x6, "c501cc76c836"}]}, 0x46) 3.19597289s ago: executing program 4 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0xe, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x4, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x2665698d, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2.949209362s ago: executing program 4 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r4 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 2.766027571s ago: executing program 2 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, 0x0, 0x0, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socket(0x1, 0x3, 0xa) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") 2.516995282s ago: executing program 3 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.515703002s ago: executing program 2 (id=414): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.064019233s ago: executing program 3 (id=418): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) 2.013506626s ago: executing program 1 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r2, 0x101, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 1.983530978s ago: executing program 0 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0xe, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x4, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x2665698d, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.771196967s ago: executing program 1 (id=421): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675", 0x143}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="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", 0x6eb}], 0x2}}], 0x2, 0x0) 1.665945992s ago: executing program 0 (id=422): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) ioctl$FIONCLEX(r3, 0x5450) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 1.094493489s ago: executing program 2 (id=423): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) rename(&(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000180)='./file0\x00') 799.100273ms ago: executing program 2 (id=424): syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 783.915583ms ago: executing program 4 (id=425): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, 0x0, 0x0, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socket(0x1, 0x3, 0xa) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") 782.712753ms ago: executing program 3 (id=426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffeee, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 751.177325ms ago: executing program 0 (id=427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syslog(0x3, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 643.34008ms ago: executing program 0 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 623.483371ms ago: executing program 3 (id=429): write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$char_usb(r0, &(0x7f0000000700), 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880d030000006afd981d8ab4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a340e00000000000000bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b80000000000000006c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d94633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d4368780082aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f918700000dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd77992f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed5146c03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070da245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71ce787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe727e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 623.344001ms ago: executing program 2 (id=430): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) write(r0, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02", 0x15) 622.290731ms ago: executing program 4 (id=431): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000680)='configfs\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07050514"], 0xa) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000540)=""/17, 0x11}], 0x1, 0x80000000, 0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fccedf25022011c8", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) 523.721136ms ago: executing program 1 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0xe, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x4, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x2665698d, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 448.323079ms ago: executing program 2 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) read(r0, 0x0, 0x0) 293.539116ms ago: executing program 1 (id=434): fsopen(&(0x7f0000000100)='hfsplus\x00', 0x0) 215.23398ms ago: executing program 1 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r4 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 215.05762ms ago: executing program 0 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 144.041973ms ago: executing program 0 (id=437): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) ioctl$FIONCLEX(r3, 0x5450) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 0s ago: executing program 3 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 62.598758][ T4174] cgroup: Unknown subsys name 'net' [ 62.733845][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.289496][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.834473][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.875400][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.916010][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.981990][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 66.005152][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.055832][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.062936][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.072787][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.110871][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.118207][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.126813][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.148453][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.155677][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.163598][ T4194] device bridge_slave_0 entered promiscuous mode [ 66.178401][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.185618][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.193464][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.209876][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.217087][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.226224][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.238818][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.246492][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.254628][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.284580][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.301714][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.325270][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.332660][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.341013][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.354893][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.361972][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.370927][ T4198] device bridge_slave_1 entered promiscuous mode [ 66.387016][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.402702][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.409933][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.418208][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.432937][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.443718][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.467902][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.475212][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.483125][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.498811][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.510460][ T4190] team0: Port device team_slave_0 added [ 66.524587][ T4190] team0: Port device team_slave_1 added [ 66.544931][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.569260][ T4186] team0: Port device team_slave_0 added [ 66.583217][ T4186] team0: Port device team_slave_1 added [ 66.590993][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.602360][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.621686][ T4194] team0: Port device team_slave_0 added [ 66.635380][ T4194] team0: Port device team_slave_1 added [ 66.641841][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.649148][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.675496][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.694851][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.722940][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.730273][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.756331][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.768293][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.775614][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.802011][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.822535][ T4198] team0: Port device team_slave_0 added [ 66.830596][ T4198] team0: Port device team_slave_1 added [ 66.843563][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.850672][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.876655][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.913361][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.920963][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.947860][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.982117][ T4193] team0: Port device team_slave_0 added [ 66.990298][ T4193] team0: Port device team_slave_1 added [ 66.997505][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.004728][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.031218][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.053381][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.060873][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.087295][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.119186][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.126287][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.152571][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.168633][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.175844][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.183132][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.190201][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.216529][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.245444][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.252613][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.259539][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.267586][ T4186] Cannot create hsr debugfs directory [ 67.273493][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.280802][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.307208][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.349663][ T4194] device hsr_slave_0 entered promiscuous mode [ 67.357222][ T4194] device hsr_slave_1 entered promiscuous mode [ 67.364512][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.372113][ T4194] Cannot create hsr debugfs directory [ 67.415797][ T4198] device hsr_slave_0 entered promiscuous mode [ 67.422460][ T4198] device hsr_slave_1 entered promiscuous mode [ 67.430186][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.438319][ T4198] Cannot create hsr debugfs directory [ 67.502498][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.509601][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.516596][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.525079][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.529313][ T4193] Cannot create hsr debugfs directory [ 67.532965][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.542993][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.549606][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.555977][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 67.816637][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.828660][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.838267][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.848900][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.906363][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.917274][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.940143][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.948935][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.019074][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.039223][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.071527][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.091573][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.108987][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.123288][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.138998][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.153012][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.178481][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.185622][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.202228][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.232796][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.242804][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.252473][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.261162][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.270123][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.279750][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.287036][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.296497][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.306027][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.314614][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.321699][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.329883][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.338574][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.350066][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.360355][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.370079][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.384913][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.395890][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.405683][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.415123][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.423889][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.431020][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.442132][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.465931][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.475409][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.484470][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.493056][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.502494][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.509623][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.519366][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.529833][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.540693][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.551041][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.560056][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.577314][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.587018][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.621201][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.630970][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.643269][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.652193][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.669508][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.681739][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.702203][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.711026][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.720506][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.729586][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.739246][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.770996][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.782781][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.814457][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.823725][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.835201][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.843735][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.880756][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.900565][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.931373][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.955206][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.962428][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.972683][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.013523][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.023946][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.034939][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.042121][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.050700][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.059595][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.068614][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.075748][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.099441][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.127217][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.138426][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.147287][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.155979][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.163872][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.172672][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.182687][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.199393][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.211554][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.221894][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.234908][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.243322][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.250424][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.260475][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.270223][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.279478][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.286610][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.299934][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.328194][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.347130][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.357770][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.369175][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.378238][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.387235][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.395749][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.403425][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.413327][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.421851][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.431049][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.463237][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.476662][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.489292][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.496714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.505000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.512468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.522046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.530749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.539624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.549041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.557915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.568159][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.575286][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.583128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.592837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.602112][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.609249][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.616676][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 69.623150][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 69.634658][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 69.640785][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 69.651785][ T4186] device veth0_vlan entered promiscuous mode [ 69.660006][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 69.673208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.681734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.694210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.702858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.712639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.721438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.730310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.740837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.749365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.757581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.766072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.775853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.796754][ T4186] device veth1_vlan entered promiscuous mode [ 69.831909][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.850643][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.888931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.897678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.910513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.919640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.929447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.939507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.948383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.957866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.966570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.975210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.983851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.993096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.003385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.021804][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.032611][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.061073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.079746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.107069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.123807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.140317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.150789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.193152][ T4186] device veth0_macvtap entered promiscuous mode [ 70.210901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.225780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.241812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.256447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.292541][ T4186] device veth1_macvtap entered promiscuous mode [ 70.312417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.321545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.335172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.343646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.351486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.360483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.368661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.381838][ T4190] device veth0_vlan entered promiscuous mode [ 70.400044][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.442118][ T4190] device veth1_vlan entered promiscuous mode [ 70.455829][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.464774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.472983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.482732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.498429][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.538115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.548149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.557616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.580016][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.593473][ T4190] device veth0_macvtap entered promiscuous mode [ 70.607859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.618461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.628586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.637454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.647091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.656572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.666129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.679209][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.688947][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.698727][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.708450][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.739049][ T4190] device veth1_macvtap entered promiscuous mode [ 70.753250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.764507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.772986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.782283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.790762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.803131][ T4193] device veth0_vlan entered promiscuous mode [ 70.825062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.832885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.849940][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.868986][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.890391][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.903147][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.935509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.951576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.963552][ T4193] device veth1_vlan entered promiscuous mode [ 70.990438][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.010871][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.022892][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.034268][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.043189][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065872][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.081721][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.101847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.110457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.119781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.131839][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.139011][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.197092][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.207154][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.221923][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.231076][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.250366][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.259383][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.274843][ T4193] device veth0_macvtap entered promiscuous mode [ 71.292770][ T4194] device veth0_vlan entered promiscuous mode [ 71.304526][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.312317][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.323852][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.333915][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.343172][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.365290][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.373300][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.392065][ T4198] device veth0_vlan entered promiscuous mode [ 71.405454][ T4193] device veth1_macvtap entered promiscuous mode [ 71.418614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.432186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.440765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.449993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.458737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.468185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.482687][ T4194] device veth1_vlan entered promiscuous mode [ 71.520399][ T4198] device veth1_vlan entered promiscuous mode [ 71.566422][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.577438][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.587370][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.588603][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.600665][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.613606][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.625012][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.636981][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.648839][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.671351][ T4194] device veth0_macvtap entered promiscuous mode [ 71.687494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.695755][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 71.701860][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 71.709185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.717269][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 71.723349][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 71.729850][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 71.732640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.744760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.753079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.761437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.770320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.779518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.789585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.798786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.808649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.832519][ T4198] device veth0_macvtap entered promiscuous mode [ 71.852418][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.866399][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.877405][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.888439][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.900081][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.911240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.920430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.929991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.939967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.962542][ T4194] device veth1_macvtap entered promiscuous mode [ 71.978114][ T4198] device veth1_macvtap entered promiscuous mode [ 71.997895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.007924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.017123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.067272][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.086530][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.108125][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.122255][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.136481][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.146825][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.158945][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.166994][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.182380][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.196242][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.207057][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.218033][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.239263][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.249897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.264464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.273489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.312997][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.331385][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.342524][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.359642][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.369810][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.380492][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.392267][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.406531][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416322][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.425492][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.435509][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.455047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.465057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.493487][ T4272] device syzkaller0 entered promiscuous mode [ 72.502127][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.513108][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.523937][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.535773][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.546952][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.557776][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.568720][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.579710][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.591139][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.602311][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.613103][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.622994][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.634390][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.645295][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.656495][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.667359][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.677870][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.689712][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.763073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.782321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.793524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.810464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.824897][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.833733][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.854914][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.863760][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959165][ T4280] device syzkaller0 entered promiscuous mode [ 73.018485][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.029086][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.078031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.101157][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.120427][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.137322][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.177494][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.199828][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.230517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.257258][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.272704][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.280700][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.312006][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.338825][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.355718][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.384226][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.398400][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.425107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.524605][ T4287] Cannot find set identified by id 0 to match [ 73.767274][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.775387][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.842870][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 73.910064][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 73.977403][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 74.323505][ T4296] Zero length message leads to an empty skb [ 74.391187][ T4296] device lo entered promiscuous mode [ 75.804590][ T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.944067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 76.354954][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.465169][ T21] usb 5-1: not running at top speed; connect to a high speed hub [ 76.635069][ T21] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 76.748679][ T21] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 76.887496][ T21] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 77.075816][ T21] usb 5-1: config 14 has no interface number 0 [ 77.166649][ T21] usb 5-1: config 14 has no interface number 1 [ 77.251605][ T21] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 77.436910][ T21] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 77.601592][ T21] usb 5-1: config 14 interface 57 has no altsetting 0 [ 77.690383][ T21] usb 5-1: config 14 interface 228 has no altsetting 0 [ 77.824818][ T21] usb 5-1: string descriptor 0 read error: -71 [ 77.855845][ T21] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 77.881109][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.911581][ T4296] device tunl0 entered promiscuous mode [ 77.918720][ T21] usb 5-1: can't set config #14, error -71 [ 77.946501][ T21] usb 5-1: USB disconnect, device number 2 [ 78.700620][ T4296] device gre0 entered promiscuous mode [ 79.854996][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 80.421315][ T4296] device gretap0 entered promiscuous mode [ 80.477115][ T4296] device erspan0 entered promiscuous mode [ 80.522505][ T4296] device ip_vti0 entered promiscuous mode [ 80.551557][ T4296] device ip6_vti0 entered promiscuous mode [ 80.643263][ T4296] device sit0 entered promiscuous mode [ 81.008361][ T4296] device ip6tnl0 entered promiscuous mode [ 81.095604][ T4296] device ip6gre0 entered promiscuous mode [ 81.429077][ T4296] device syz_tun entered promiscuous mode [ 81.499218][ T4296] device ip6gretap0 entered promiscuous mode [ 81.552285][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.560868][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.595725][ T4296] device bridge0 entered promiscuous mode [ 81.670224][ T4296] device vcan0 entered promiscuous mode [ 81.749914][ T4296] device bond0 entered promiscuous mode [ 81.772665][ T4296] device bond_slave_0 entered promiscuous mode [ 81.814811][ T4296] device bond_slave_1 entered promiscuous mode [ 81.890833][ T4296] device team0 entered promiscuous mode [ 81.899657][ T4296] device team_slave_0 entered promiscuous mode [ 81.914203][ T4296] device team_slave_1 entered promiscuous mode [ 81.966120][ T4296] device dummy0 entered promiscuous mode [ 82.049821][ T4296] device nlmon0 entered promiscuous mode [ 82.081870][ T4296] device caif0 entered promiscuous mode [ 82.109425][ T4296] device batadv0 entered promiscuous mode [ 82.174253][ T4296] device vxcan0 entered promiscuous mode [ 82.200321][ T4296] device vxcan1 entered promiscuous mode [ 82.221152][ T4296] device veth0 entered promiscuous mode [ 82.271302][ T4296] device veth1 entered promiscuous mode [ 82.328607][ T4296] device wg0 entered promiscuous mode [ 82.457062][ T4296] device wg1 entered promiscuous mode [ 82.632520][ T4296] device wg2 entered promiscuous mode [ 82.661297][ T4296] device veth0_to_bridge entered promiscuous mode [ 82.771687][ T4296] device veth1_to_bridge entered promiscuous mode [ 83.182646][ T4296] device veth0_to_bond entered promiscuous mode [ 83.244977][ T4296] device veth1_to_bond entered promiscuous mode [ 83.321814][ T4296] device veth0_to_team entered promiscuous mode [ 83.372194][ T4296] device veth1_to_team entered promiscuous mode [ 83.418183][ T4296] device veth0_to_batadv entered promiscuous mode [ 83.427783][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.440960][ T4296] device batadv_slave_0 entered promiscuous mode [ 83.462301][ T4296] device veth1_to_batadv entered promiscuous mode [ 83.482274][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.492628][ T4296] device batadv_slave_1 entered promiscuous mode [ 83.515882][ T4296] device xfrm0 entered promiscuous mode [ 83.537964][ T4296] device veth0_to_hsr entered promiscuous mode [ 83.563550][ T4296] device veth1_to_hsr entered promiscuous mode [ 83.583221][ T4296] device hsr0 entered promiscuous mode [ 83.604612][ T4296] device veth1_virt_wifi entered promiscuous mode [ 83.640538][ T4296] device veth0_virt_wifi entered promiscuous mode [ 83.659147][ T4296] device virt_wifi0 entered promiscuous mode [ 83.686867][ T4296] device vlan0 entered promiscuous mode [ 83.692740][ T4296] device vlan1 entered promiscuous mode [ 83.703646][ T4296] device macvlan0 entered promiscuous mode [ 83.716760][ T4296] device macvlan1 entered promiscuous mode [ 83.737227][ T4296] device ipvlan0 entered promiscuous mode [ 83.743111][ T4296] device ipvlan1 entered promiscuous mode [ 83.771771][ T4296] device macvtap0 entered promiscuous mode [ 83.782638][ T4296] device macsec0 entered promiscuous mode [ 83.792531][ T4296] device geneve0 entered promiscuous mode [ 83.802629][ T4296] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.812085][ T4296] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.821133][ T4296] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.830519][ T4296] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.839750][ T4296] device geneve1 entered promiscuous mode [ 83.879237][ T4296] device netdevsim0 entered promiscuous mode [ 83.889170][ T4296] device netdevsim1 entered promiscuous mode [ 83.897965][ T4296] device netdevsim2 entered promiscuous mode [ 83.907253][ T4296] device netdevsim3 entered promiscuous mode [ 83.938280][ T4296] device wlan0 entered promiscuous mode [ 83.990666][ T4296] device wlan1 entered promiscuous mode [ 84.138917][ T4296] syz.2.9 (4296) used greatest stack depth: 19056 bytes left [ 84.159136][ T4366] device syzkaller0 entered promiscuous mode [ 84.688614][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.964099][ C1] net_ratelimit: 57 callbacks suppressed [ 85.274812][ T21] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 86.356611][ T4405] sched: RT throttling activated [ 86.395832][ T21] usb 1-1: config 1 has no interface number 0 [ 86.413390][ T4410] Cannot find set identified by id 0 to match [ 86.667999][ T21] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 86.831226][ T7] cfg80211: failed to load regulatory.db [ 86.845812][ T4395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.934782][ T21] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 87.014968][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.090168][ T21] usb 1-1: Product: syz [ 87.137519][ T21] usb 1-1: Manufacturer: syz [ 87.213139][ T21] usb 1-1: SerialNumber: syz [ 87.297005][ T4396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.374543][ T21] usb 1-1: can't set config #1, error -71 [ 87.397867][ T4396] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 87.411335][ T21] usb 1-1: USB disconnect, device number 2 [ 87.580468][ T4409] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 87.632032][ T4418] netlink: 14 bytes leftover after parsing attributes in process `syz.2.28'. [ 88.494732][ T4418] bond1: (slave macvlan2): Removing an active aggregator [ 88.535045][ T4418] bond1: (slave macvlan2): Releasing backup interface [ 88.571374][ T4418] bond1: (slave macvlan2): the permanent HWaddr of slave - e6:32:06:d2:d1:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 89.339791][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.550963][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.716352][ T4418] bond0 (unregistering): Released all slaves [ 90.164227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 90.236248][ C1] net_ratelimit: 34 callbacks suppressed [ 90.334273][ T4435] device lo entered promiscuous mode [ 90.456974][ T4441] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.483675][ T4435] device tunl0 entered promiscuous mode [ 91.068305][ T4435] device gre0 entered promiscuous mode [ 92.499153][ T4455] Cannot find set identified by id 0 to match [ 93.322587][ T4435] device gretap0 entered promiscuous mode [ 93.707453][ T4435] device erspan0 entered promiscuous mode [ 93.830113][ T4435] device ip_vti0 entered promiscuous mode [ 93.903150][ T4435] device ip6_vti0 entered promiscuous mode [ 93.960216][ T4435] device sit0 entered promiscuous mode [ 94.028822][ T4435] device ip6tnl0 entered promiscuous mode [ 94.109510][ T4435] device ip6gre0 entered promiscuous mode [ 94.189989][ T4435] device syz_tun entered promiscuous mode [ 94.231600][ T4435] device ip6gretap0 entered promiscuous mode [ 95.089472][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.097344][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.155925][ T4435] device bridge0 entered promiscuous mode [ 95.444097][ C0] net_ratelimit: 26 callbacks suppressed [ 95.566825][ T4435] device vcan0 entered promiscuous mode [ 95.755169][ T4435] device bond0 entered promiscuous mode [ 95.761226][ T4435] device bond_slave_0 entered promiscuous mode [ 95.829411][ T4435] device bond_slave_1 entered promiscuous mode [ 96.308395][ T4435] device team0 entered promiscuous mode [ 96.314547][ T4435] device team_slave_0 entered promiscuous mode [ 96.378638][ T4435] device team_slave_1 entered promiscuous mode [ 96.804721][ T4435] device dummy0 entered promiscuous mode [ 97.223112][ T4435] device nlmon0 entered promiscuous mode [ 97.231300][ T4435] device caif0 entered promiscuous mode [ 97.241024][ T4435] device batadv0 entered promiscuous mode [ 97.259895][ T4435] device vxcan0 entered promiscuous mode [ 97.270313][ T4435] device vxcan1 entered promiscuous mode [ 97.278024][ T4435] device veth0 entered promiscuous mode [ 97.297318][ T4435] device veth1 entered promiscuous mode [ 97.309855][ T4435] device wg0 entered promiscuous mode [ 97.342931][ T4435] device wg1 entered promiscuous mode [ 97.352338][ T4435] device wg2 entered promiscuous mode [ 97.406942][ T4435] device veth0_to_bridge entered promiscuous mode [ 97.429884][ T4435] device veth1_to_bridge entered promiscuous mode [ 97.505332][ T4435] device veth0_to_bond entered promiscuous mode [ 97.568936][ T4435] device veth1_to_bond entered promiscuous mode [ 97.606528][ T4435] device veth0_to_team entered promiscuous mode [ 97.651443][ T4435] device veth1_to_team entered promiscuous mode [ 97.697757][ T4435] device veth0_to_batadv entered promiscuous mode [ 97.706945][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.721200][ T4435] device batadv_slave_0 entered promiscuous mode [ 97.761828][ T4435] device veth1_to_batadv entered promiscuous mode [ 97.771599][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.785870][ T4435] device batadv_slave_1 entered promiscuous mode [ 97.808590][ T4435] device xfrm0 entered promiscuous mode [ 97.831871][ T4435] device veth0_to_hsr entered promiscuous mode [ 97.899219][ T4435] device veth1_to_hsr entered promiscuous mode [ 97.945608][ T4435] device hsr0 entered promiscuous mode [ 97.955368][ T4435] device veth1_virt_wifi entered promiscuous mode [ 98.001812][ T4435] device veth0_virt_wifi entered promiscuous mode [ 98.016718][ T4435] device virt_wifi0 entered promiscuous mode [ 98.094686][ T4435] device vlan0 entered promiscuous mode [ 98.100984][ T4435] device vlan1 entered promiscuous mode [ 98.120153][ T4435] device macvlan0 entered promiscuous mode [ 98.148997][ T4435] device macvlan1 entered promiscuous mode [ 98.166394][ T4435] device ipvlan0 entered promiscuous mode [ 98.172386][ T4435] device ipvlan1 entered promiscuous mode [ 98.229211][ T4435] device macvtap0 entered promiscuous mode [ 98.275977][ T4435] device macsec0 entered promiscuous mode [ 98.295421][ T4435] device geneve0 entered promiscuous mode [ 98.332035][ T4435] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.341046][ T4435] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.354406][ T4435] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.363329][ T4435] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.372625][ T4435] device geneve1 entered promiscuous mode [ 98.408148][ T4435] device netdevsim0 entered promiscuous mode [ 98.437251][ T4435] device netdevsim1 entered promiscuous mode [ 98.461089][ T4435] device netdevsim2 entered promiscuous mode [ 98.482433][ T4435] device netdevsim3 entered promiscuous mode [ 98.507617][ T4435] device wlan0 entered promiscuous mode [ 98.531928][ T4435] device wlan1 entered promiscuous mode [ 98.609257][ T4468] device syzkaller0 entered promiscuous mode [ 99.267936][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 100.990845][ T4513] Cannot find set identified by id 0 to match [ 101.018282][ C1] net_ratelimit: 47 callbacks suppressed [ 101.488012][ T4521] FAULT_INJECTION: forcing a failure. [ 101.488012][ T4521] name failslab, interval 1, probability 0, space 0, times 1 [ 101.552350][ T4521] CPU: 0 PID: 4521 Comm: syz.4.58 Not tainted syzkaller #0 [ 101.559610][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.569711][ T4521] Call Trace: [ 101.573022][ T4521] [ 101.575979][ T4521] dump_stack_lvl+0x188/0x250 [ 101.580719][ T4521] ? show_regs_print_info+0x20/0x20 [ 101.585954][ T4521] ? load_image+0x410/0x410 [ 101.590500][ T4521] ? __might_sleep+0xf0/0xf0 [ 101.595128][ T4521] ? __lock_acquire+0x7b50/0x7b50 [ 101.600196][ T4521] should_fail+0x383/0x4b0 [ 101.604656][ T4521] should_failslab+0x5/0x20 [ 101.609216][ T4521] slab_pre_alloc_hook+0x51/0xc0 [ 101.614191][ T4521] kmem_cache_alloc_node+0x47/0x2c0 [ 101.619419][ T4521] ? alloc_vmap_area+0x668/0x1b30 [ 101.624477][ T4521] alloc_vmap_area+0x668/0x1b30 [ 101.629396][ T4521] ? vm_map_ram+0xba0/0xba0 [ 101.633939][ T4521] __get_vm_area_node+0x14f/0x2d0 [ 101.639002][ T4521] vmap+0xd4/0x290 [ 101.642754][ T4521] ? xdp_umem_create+0x5ff/0x790 [ 101.647723][ T4521] xdp_umem_create+0x5ff/0x790 [ 101.652528][ T4521] xsk_setsockopt+0x696/0x800 [ 101.657245][ T4521] ? xsk_poll+0x570/0x570 [ 101.661607][ T4521] ? __fget_files+0x402/0x470 [ 101.666327][ T4521] ? aa_sock_opt_perm+0x74/0x100 [ 101.671295][ T4521] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 101.676877][ T4521] ? security_socket_setsockopt+0x7a/0xa0 [ 101.682631][ T4521] ? xsk_poll+0x570/0x570 [ 101.687008][ T4521] __sys_setsockopt+0x2bf/0x3d0 [ 101.691902][ T4521] __x64_sys_setsockopt+0xb1/0xc0 [ 101.696962][ T4521] do_syscall_64+0x4c/0xa0 [ 101.701417][ T4521] ? clear_bhb_loop+0x30/0x80 [ 101.706126][ T4521] ? clear_bhb_loop+0x30/0x80 [ 101.706153][ T4521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.706191][ T4521] RIP: 0033:0x7fab3bf84159 [ 101.706210][ T4521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.706229][ T4521] RSP: 002b:00007fab3a1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.706253][ T4521] RAX: ffffffffffffffda RBX: 00007fab3c20bfa0 RCX: 00007fab3bf84159 [ 101.706270][ T4521] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 101.706283][ T4521] RBP: 00007fab3c01b06b R08: 0000000000000020 R09: 0000000000000000 [ 101.706297][ T4521] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.706312][ T4521] R13: 00007fab3c20c038 R14: 00007fab3c20bfa0 R15: 00007ffedc05ded8 [ 101.706341][ T4521] [ 101.930660][ T4527] device bond1 entered promiscuous mode [ 101.944188][ T4527] device ip6gretap1 entered promiscuous mode [ 103.320238][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 103.718214][ T4543] device syzkaller0 entered promiscuous mode [ 104.427706][ T4566] Cannot find set identified by id 0 to match [ 106.164099][ C0] net_ratelimit: 26 callbacks suppressed [ 108.215976][ T4608] device syzkaller0 entered promiscuous mode [ 108.613946][ T4614] device lo entered promiscuous mode [ 108.845204][ T4614] device tunl0 entered promiscuous mode [ 108.904273][ T4614] device gre0 entered promiscuous mode [ 109.062865][ T4614] device gretap0 entered promiscuous mode [ 109.122876][ T4614] device erspan0 entered promiscuous mode [ 109.167914][ T4614] device ip_vti0 entered promiscuous mode [ 109.207203][ T4614] device ip6_vti0 entered promiscuous mode [ 109.240792][ T4614] device sit0 entered promiscuous mode [ 109.324488][ T4383] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.367819][ T4614] device ip6tnl0 entered promiscuous mode [ 109.589180][ T4614] device ip6gre0 entered promiscuous mode [ 109.704741][ T4383] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.758503][ T4383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 109.867101][ T4383] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.979479][ T4383] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 110.060871][ T4383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.221983][ T4614] device syz_tun entered promiscuous mode [ 110.318043][ T4614] device ip6gretap0 entered promiscuous mode [ 110.435521][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.443094][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.612401][ T4614] device bridge0 entered promiscuous mode [ 110.768500][ T4614] device vcan0 entered promiscuous mode [ 110.775207][ T4383] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 110.786307][ T4383] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 110.898204][ T4383] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 111.160461][ T4383] cxacru: probe of 1-1:1.0 failed with error -71 [ 111.444111][ C0] net_ratelimit: 12 callbacks suppressed [ 111.454586][ T4383] usb 1-1: USB disconnect, device number 3 [ 112.282798][ T4614] device bond0 entered promiscuous mode [ 112.289160][ T4614] device bond_slave_0 entered promiscuous mode [ 112.297938][ T4614] device bond_slave_1 entered promiscuous mode [ 112.318243][ T4614] device team0 entered promiscuous mode [ 112.326244][ T4614] device team_slave_0 entered promiscuous mode [ 112.333478][ T4614] device team_slave_1 entered promiscuous mode [ 112.379388][ T4614] device dummy0 entered promiscuous mode [ 112.410181][ T4614] device nlmon0 entered promiscuous mode [ 112.418454][ T4614] device caif0 entered promiscuous mode [ 112.427496][ T4614] device batadv0 entered promiscuous mode [ 112.465220][ T4614] device vxcan0 entered promiscuous mode [ 112.479268][ T4614] device vxcan1 entered promiscuous mode [ 112.492963][ T4614] device veth0 entered promiscuous mode [ 112.521451][ T4614] device veth1 entered promiscuous mode [ 112.551220][ T4614] device wg0 entered promiscuous mode [ 112.573102][ T4614] device wg1 entered promiscuous mode [ 112.597089][ T4614] device wg2 entered promiscuous mode [ 112.606981][ T4614] device veth0_to_bridge entered promiscuous mode [ 112.620340][ T4614] device veth1_to_bridge entered promiscuous mode [ 112.665684][ T4614] device veth0_to_bond entered promiscuous mode [ 112.687408][ T4614] device veth1_to_bond entered promiscuous mode [ 112.710108][ T4614] device veth0_to_team entered promiscuous mode [ 112.790914][ T4614] device veth1_to_team entered promiscuous mode [ 112.828773][ T4614] device veth0_to_batadv entered promiscuous mode [ 112.849437][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.859768][ T4614] device batadv_slave_0 entered promiscuous mode [ 112.925191][ T4614] device veth1_to_batadv entered promiscuous mode [ 112.943444][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.968492][ T4614] device batadv_slave_1 entered promiscuous mode [ 112.994661][ T4614] device xfrm0 entered promiscuous mode [ 113.011237][ T4614] device veth0_to_hsr entered promiscuous mode [ 113.049742][ T4614] device veth1_to_hsr entered promiscuous mode [ 113.086163][ T4614] device hsr0 entered promiscuous mode [ 113.109704][ T4614] device veth1_virt_wifi entered promiscuous mode [ 113.134945][ T4614] device veth0_virt_wifi entered promiscuous mode [ 113.162876][ T4614] device virt_wifi0 entered promiscuous mode [ 113.248384][ T4614] device vlan0 entered promiscuous mode [ 113.262779][ T4614] device vlan1 entered promiscuous mode [ 113.269542][ T4614] device macvlan0 entered promiscuous mode [ 113.296464][ T4614] device macvlan1 entered promiscuous mode [ 113.305911][ T4614] device ipvlan0 entered promiscuous mode [ 113.311842][ T4614] device ipvlan1 entered promiscuous mode [ 113.366994][ T4614] device macvtap0 entered promiscuous mode [ 113.377677][ T4614] device macsec0 entered promiscuous mode [ 113.399329][ T4614] device geneve0 entered promiscuous mode [ 113.474423][ T4614] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.483368][ T4614] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.492480][ T4614] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.501495][ T4614] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.511855][ T4614] device geneve1 entered promiscuous mode [ 113.534989][ T4614] device netdevsim0 entered promiscuous mode [ 113.584266][ T4614] device netdevsim1 entered promiscuous mode [ 113.596050][ T4614] device netdevsim2 entered promiscuous mode [ 113.604816][ T4614] device netdevsim3 entered promiscuous mode [ 113.628943][ T4614] device wlan0 entered promiscuous mode [ 113.642171][ T4614] device wlan1 entered promiscuous mode [ 113.760989][ T4633] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.90' resets device [ 116.561521][ C0] net_ratelimit: 30 callbacks suppressed [ 116.792727][ T4669] device lo entered promiscuous mode [ 116.872748][ T4669] device tunl0 entered promiscuous mode [ 116.894267][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.920790][ T4669] device gre0 entered promiscuous mode [ 117.092153][ T4669] device gretap0 entered promiscuous mode [ 117.126559][ T4669] device erspan0 entered promiscuous mode [ 117.153139][ T4669] device ip_vti0 entered promiscuous mode [ 117.169131][ T4669] device ip6_vti0 entered promiscuous mode [ 117.183927][ T4669] device sit0 entered promiscuous mode [ 117.292266][ T4669] device ip6tnl0 entered promiscuous mode [ 117.299315][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.312651][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 117.324940][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 117.338072][ T21] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 117.347311][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.386170][ T4669] device ip6gre0 entered promiscuous mode [ 117.420057][ T4669] device syz_tun entered promiscuous mode [ 117.455177][ T4669] device ip6gretap0 entered promiscuous mode [ 117.484492][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.491973][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.500371][ T4669] device bridge0 entered promiscuous mode [ 117.530928][ T4669] device vcan0 entered promiscuous mode [ 117.548069][ T4669] device bond0 entered promiscuous mode [ 117.553678][ T4669] device bond_slave_0 entered promiscuous mode [ 117.560419][ T4669] device bond_slave_1 entered promiscuous mode [ 117.590522][ T4669] device team0 entered promiscuous mode [ 117.596304][ T4669] device team_slave_0 entered promiscuous mode [ 117.602739][ T4669] device team_slave_1 entered promiscuous mode [ 117.639998][ T4669] device dummy0 entered promiscuous mode [ 117.678196][ T4669] device nlmon0 entered promiscuous mode [ 117.686275][ T4669] device caif0 entered promiscuous mode [ 117.705360][ T4669] device batadv0 entered promiscuous mode [ 117.733560][ T4669] device vxcan0 entered promiscuous mode [ 117.747509][ T4669] device vxcan1 entered promiscuous mode [ 117.758202][ T4669] device veth0 entered promiscuous mode [ 117.787428][ T4669] device veth1 entered promiscuous mode [ 117.817148][ T4669] device wg0 entered promiscuous mode [ 117.833988][ T4669] device wg1 entered promiscuous mode [ 117.849916][ T4669] device wg2 entered promiscuous mode [ 117.864837][ T21] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 117.871061][ T21] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 117.881704][ T21] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 117.890892][ T21] cxacru: probe of 3-1:1.0 failed with error -71 [ 117.915351][ T21] usb 3-1: USB disconnect, device number 2 [ 117.935792][ T4669] device veth0_to_bridge entered promiscuous mode [ 118.005325][ T4669] device veth1_to_bridge entered promiscuous mode [ 118.050434][ T4669] device veth0_to_bond entered promiscuous mode [ 118.089861][ T4669] device veth1_to_bond entered promiscuous mode [ 118.126726][ T4669] device veth0_to_team entered promiscuous mode [ 118.171223][ T4669] device veth1_to_team entered promiscuous mode [ 118.218693][ T4669] device veth0_to_batadv entered promiscuous mode [ 118.228024][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.242673][ T4669] device batadv_slave_0 entered promiscuous mode [ 118.259816][ T4669] device veth1_to_batadv entered promiscuous mode [ 118.277137][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.286075][ T4669] device batadv_slave_1 entered promiscuous mode [ 118.297734][ T4669] device xfrm0 entered promiscuous mode [ 118.317346][ T4669] device veth0_to_hsr entered promiscuous mode [ 118.355427][ T4669] device veth1_to_hsr entered promiscuous mode [ 118.380839][ T4669] device hsr0 entered promiscuous mode [ 118.395255][ T4669] device veth1_virt_wifi entered promiscuous mode [ 118.470322][ T4669] device veth0_virt_wifi entered promiscuous mode [ 118.507649][ T4669] device virt_wifi0 entered promiscuous mode [ 118.522163][ T4679] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 118.522163][ T4679] [ 118.536014][ T4679] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 118.548691][ T4679] CIFS: Attempting to mount \\127.0.0.1\share [ 118.655039][ T4669] device vlan0 entered promiscuous mode [ 118.660930][ T4669] device vlan1 entered promiscuous mode [ 118.667984][ T4669] device macvlan0 entered promiscuous mode [ 118.677972][ T4669] device macvlan1 entered promiscuous mode [ 118.689496][ T4669] device ipvlan0 entered promiscuous mode [ 118.696602][ T4669] device ipvlan1 entered promiscuous mode [ 118.711392][ T4669] device macvtap0 entered promiscuous mode [ 118.730780][ T4669] device macsec0 entered promiscuous mode [ 118.750403][ T4669] device geneve0 entered promiscuous mode [ 118.759918][ T4669] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.770918][ T4669] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.780972][ T4669] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.791052][ T4669] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.800558][ T4669] device geneve1 entered promiscuous mode [ 118.825590][ T4669] device netdevsim0 entered promiscuous mode [ 118.845236][ T4669] device netdevsim1 entered promiscuous mode [ 118.853752][ T4669] device netdevsim2 entered promiscuous mode [ 118.863422][ T4669] device netdevsim3 entered promiscuous mode [ 118.882517][ T4669] device wlan0 entered promiscuous mode [ 118.897502][ T4669] device wlan1 entered promiscuous mode [ 120.904088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 120.916935][ T4679] CIFS: VFS: Error connecting to socket. Aborting operation. [ 120.925728][ T4679] CIFS: VFS: cifs_mount failed w/return code = -4 [ 122.024338][ C0] net_ratelimit: 11 callbacks suppressed [ 122.270222][ T4713] device syzkaller0 entered promiscuous mode [ 124.920881][ T4738] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 124.920881][ T4738] [ 124.982913][ T4738] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 125.033115][ T4738] CIFS: Attempting to mount \\127.0.0.1\share [ 125.344062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 125.594049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 125.654095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 125.724921][ T4738] CIFS: VFS: Error connecting to socket. Aborting operation. [ 125.744255][ T4738] CIFS: VFS: cifs_mount failed w/return code = -4 [ 126.824168][ T4761] device syzkaller0 entered promiscuous mode [ 127.524239][ C1] net_ratelimit: 3 callbacks suppressed [ 127.593859][ T4769] sctp: failed to load transform for md5: -2 [ 127.658801][ T4779] FAULT_INJECTION: forcing a failure. [ 127.658801][ T4779] name failslab, interval 1, probability 0, space 0, times 0 [ 127.672099][ T4779] CPU: 1 PID: 4779 Comm: syz.4.133 Not tainted syzkaller #0 [ 127.679435][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.689521][ T4779] Call Trace: [ 127.692830][ T4779] [ 127.695791][ T4779] dump_stack_lvl+0x188/0x250 [ 127.700504][ T4779] ? sk_alloc+0x2f/0x310 [ 127.704823][ T4779] ? l2cap_sock_create+0x12b/0x2a0 [ 127.709976][ T4779] ? show_regs_print_info+0x20/0x20 [ 127.715217][ T4779] ? load_image+0x410/0x410 [ 127.719758][ T4779] should_fail+0x383/0x4b0 [ 127.724204][ T4779] should_failslab+0x5/0x20 [ 127.728739][ T4779] slab_pre_alloc_hook+0x51/0xc0 [ 127.733707][ T4779] __kmalloc+0x6b/0x340 [ 127.737886][ T4779] ? security_sk_alloc+0x47/0x130 [ 127.742945][ T4779] security_sk_alloc+0x47/0x130 [ 127.747834][ T4779] sk_prot_alloc+0x101/0x210 [ 127.752452][ T4779] ? sk_alloc+0x1d/0x310 [ 127.756721][ T4779] sk_alloc+0x2f/0x310 [ 127.760851][ T4779] ? bt_sock_alloc+0x22/0x350 [ 127.765561][ T4779] bt_sock_alloc+0x37/0x350 [ 127.770098][ T4779] l2cap_sock_create+0x12b/0x2a0 [ 127.775073][ T4779] bt_sock_create+0x155/0x220 [ 127.779790][ T4779] __sock_create+0x473/0x910 [ 127.784423][ T4779] __sys_socket+0xe2/0x170 [ 127.788876][ T4779] __x64_sys_socket+0x76/0x80 [ 127.793585][ T4779] do_syscall_64+0x4c/0xa0 [ 127.798036][ T4779] ? clear_bhb_loop+0x30/0x80 [ 127.802752][ T4779] ? clear_bhb_loop+0x30/0x80 [ 127.807469][ T4779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.813402][ T4779] RIP: 0033:0x7fab3bf84159 [ 127.817852][ T4779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.837499][ T4779] RSP: 002b:00007fab3a1dbfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.845964][ T4779] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fab3bf84159 [ 127.853972][ T4779] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 127.861986][ T4779] RBP: 00007fab3c01b06b R08: 0000000000000000 R09: 0000000000000000 [ 127.869997][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.878007][ T4779] R13: 00007fab3c20c038 R14: 00007fab3c20bfa0 R15: 00007ffedc05ded8 [ 127.886042][ T4779] [ 128.516056][ T4787] device syzkaller0 entered promiscuous mode [ 129.979696][ T4809] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 129.979696][ T4809] [ 129.993567][ T4809] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 130.006504][ T4809] CIFS: Attempting to mount \\127.0.0.1\share [ 130.214249][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.484192][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 130.614472][ T4230] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.627501][ T4230] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.641495][ T4230] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.549344][ T4809] CIFS: VFS: Error connecting to socket. Aborting operation. [ 131.556842][ T4809] CIFS: VFS: cifs_mount failed w/return code = -4 [ 131.564076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 131.574067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 131.584059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 131.646405][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.677843][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 131.850310][ T4230] usbtmc 1-1:16.0: bulk endpoints not found [ 132.104438][ T4230] usb 1-1: USB disconnect, device number 4 [ 132.567784][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.574770][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.605463][ T4852] block nbd2: NBD_DISCONNECT [ 132.685338][ T4847] block nbd2: Disconnected due to user request. [ 132.743649][ T4847] block nbd2: shutting down sockets [ 132.804088][ C0] net_ratelimit: 1 callbacks suppressed [ 133.228956][ T4868] xt_hashlimit: size too large, truncated to 1048576 [ 133.694515][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.084664][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.196511][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 134.319633][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 134.434455][ T4230] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 134.474132][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.482369][ T4884] device syzkaller0 entered promiscuous mode [ 134.532396][ T4887] process 'syz.2.159' launched './file0' with NULL argv: empty string added [ 134.935225][ T4892] FAULT_INJECTION: forcing a failure. [ 134.935225][ T4892] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 134.994139][ T4892] CPU: 0 PID: 4892 Comm: syz.4.160 Not tainted syzkaller #0 [ 135.001486][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.011562][ T4892] Call Trace: [ 135.014858][ T4892] [ 135.017838][ T4892] dump_stack_lvl+0x188/0x250 [ 135.022582][ T4892] ? show_regs_print_info+0x20/0x20 [ 135.027805][ T4892] ? load_image+0x410/0x410 [ 135.028450][ T4230] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 135.032334][ T4892] ? __lock_acquire+0x7b50/0x7b50 [ 135.038643][ T4230] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 135.043529][ T4892] ? kmem_cache_free+0x8f/0x210 [ 135.051375][ T4230] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 135.056123][ T4892] should_fail+0x383/0x4b0 [ 135.056167][ T4892] prepare_alloc_pages+0x1e3/0x5b0 [ 135.067247][ T4892] __alloc_pages+0x11b/0x480 [ 135.067278][ T4892] ? zone_statistics+0x170/0x170 [ 135.067307][ T4892] ? __rwlock_init+0x140/0x140 [ 135.067332][ T4892] ? alloc_pages+0x452/0x560 [ 135.082161][ T4892] __get_free_pages+0x8/0x30 [ 135.082191][ T4892] kasan_populate_vmalloc_pte+0x21/0xc0 [ 135.082217][ T4892] __apply_to_page_range+0x987/0xd10 [ 135.107236][ T4892] ? kasan_populate_vmalloc+0x70/0x70 [ 135.112649][ T4892] alloc_vmap_area+0x19e8/0x1b30 [ 135.117640][ T4892] ? vm_map_ram+0xba0/0xba0 [ 135.117672][ T4892] __get_vm_area_node+0x14f/0x2d0 [ 135.117700][ T4892] __vmalloc_node_range+0xef/0x8b0 [ 135.132383][ T4892] ? kernel_read_file+0x41a/0x6a0 [ 135.132412][ T4892] ? rcu_lock_release+0x9/0x20 [ 135.142228][ T4892] ? ima_post_path_mknod+0x160/0x160 [ 135.147550][ T4892] ? kernel_read_file+0x41a/0x6a0 [ 135.152605][ T4892] vmalloc+0x75/0x80 [ 135.156531][ T4892] ? kernel_read_file+0x41a/0x6a0 [ 135.161589][ T4892] kernel_read_file+0x41a/0x6a0 [ 135.161622][ T4892] ? vfs_fsconfig_locked+0x400/0x400 [ 135.161647][ T4892] ? __fdget+0x18b/0x210 [ 135.161669][ T4892] ? kernel_read_file_from_fd+0x28/0x120 [ 135.176068][ T4892] kernel_read_file_from_fd+0xbb/0x120 [ 135.176099][ T4892] __se_sys_finit_module+0x130/0x200 [ 135.192520][ T4892] ? __x64_sys_finit_module+0x80/0x80 [ 135.197950][ T4892] ? lock_chain_count+0x20/0x20 [ 135.202852][ T4892] ? lockdep_hardirqs_on+0x94/0x140 [ 135.202884][ T4892] do_syscall_64+0x4c/0xa0 [ 135.202906][ T4892] ? clear_bhb_loop+0x30/0x80 [ 135.212568][ T4892] ? clear_bhb_loop+0x30/0x80 [ 135.212617][ T4892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.221991][ T4892] RIP: 0033:0x7fab3bf84159 [ 135.222013][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.222033][ T4892] RSP: 002b:00007fab3a1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 135.222058][ T4892] RAX: ffffffffffffffda RBX: 00007fab3c20bfa0 RCX: 00007fab3bf84159 [ 135.232392][ T4892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.260417][ T4892] RBP: 00007fab3c01b06b R08: 0000000000000000 R09: 0000000000000000 [ 135.260433][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.260445][ T4892] R13: 00007fab3c20c038 R14: 00007fab3c20bfa0 R15: 00007ffedc05ded8 [ 135.260473][ T4892] [ 135.307210][ T4230] cxacru: probe of 2-1:1.0 failed with error -71 [ 135.336158][ T4230] usb 2-1: USB disconnect, device number 2 [ 135.484489][ T4892] syz.4.160: vmalloc error: size 4194304, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 135.523273][ T4892] CPU: 1 PID: 4892 Comm: syz.4.160 Not tainted syzkaller #0 [ 135.530629][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.540831][ T4892] Call Trace: [ 135.544143][ T4892] [ 135.547097][ T4892] dump_stack_lvl+0x188/0x250 [ 135.551805][ T4892] ? rcu_lock_release+0x5/0x20 [ 135.556596][ T4892] ? show_regs_print_info+0x20/0x20 [ 135.561840][ T4892] ? load_image+0x410/0x410 [ 135.566392][ T4892] warn_alloc+0x245/0x320 [ 135.570757][ T4892] ? zone_watermark_ok_safe+0x250/0x250 [ 135.576336][ T4892] ? __get_vm_area_node+0x164/0x2d0 [ 135.581606][ T4892] ? kfree+0xef/0x2a0 [ 135.585750][ T4892] __vmalloc_node_range+0x2b1/0x8b0 [ 135.590976][ T4892] ? rcu_lock_release+0x9/0x20 [ 135.595763][ T4892] ? ima_post_path_mknod+0x160/0x160 [ 135.601092][ T4892] ? kernel_read_file+0x41a/0x6a0 [ 135.606145][ T4892] vmalloc+0x75/0x80 [ 135.610094][ T4892] ? kernel_read_file+0x41a/0x6a0 [ 135.615152][ T4892] kernel_read_file+0x41a/0x6a0 [ 135.620032][ T4892] ? vfs_fsconfig_locked+0x400/0x400 [ 135.625355][ T4892] ? __fdget+0x18b/0x210 [ 135.629643][ T4892] ? kernel_read_file_from_fd+0x28/0x120 [ 135.635309][ T4892] kernel_read_file_from_fd+0xbb/0x120 [ 135.640804][ T4892] __se_sys_finit_module+0x130/0x200 [ 135.646127][ T4892] ? __x64_sys_finit_module+0x80/0x80 [ 135.651540][ T4892] ? lock_chain_count+0x20/0x20 [ 135.656433][ T4892] ? lockdep_hardirqs_on+0x94/0x140 [ 135.661677][ T4892] do_syscall_64+0x4c/0xa0 [ 135.666143][ T4892] ? clear_bhb_loop+0x30/0x80 [ 135.670874][ T4892] ? clear_bhb_loop+0x30/0x80 [ 135.675610][ T4892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.681542][ T4892] RIP: 0033:0x7fab3bf84159 [ 135.685986][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.705621][ T4892] RSP: 002b:00007fab3a1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 135.714067][ T4892] RAX: ffffffffffffffda RBX: 00007fab3c20bfa0 RCX: 00007fab3bf84159 [ 135.722085][ T4892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.730080][ T4892] RBP: 00007fab3c01b06b R08: 0000000000000000 R09: 0000000000000000 [ 135.738075][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.746085][ T4892] R13: 00007fab3c20c038 R14: 00007fab3c20bfa0 R15: 00007ffedc05ded8 [ 135.754126][ T4892] [ 136.788298][ T4892] Mem-Info: [ 136.791470][ T4892] active_anon:270 inactive_anon:6738 isolated_anon:0 [ 136.791470][ T4892] active_file:21870 inactive_file:35858 isolated_file:0 [ 136.791470][ T4892] unevictable:768 dirty:112 writeback:0 [ 136.791470][ T4892] slab_reclaimable:20392 slab_unreclaimable:94404 [ 136.791470][ T4892] mapped:29767 shmem:1633 pagetables:639 bounce:0 [ 136.791470][ T4892] kernel_misc_reclaimable:0 [ 136.791470][ T4892] free:1365321 free_pcp:10656 free_cma:0 [ 136.834858][ T4892] Node 0 active_anon:1048kB inactive_anon:26440kB active_file:87280kB inactive_file:143432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119068kB dirty:444kB writeback:0kB shmem:4452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11360kB pagetables:2556kB all_unreclaimable? no [ 136.984190][ T4892] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 137.215448][ T4892] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.708087][ T4892] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 137.774987][ T4892] Node 0 DMA32 free:1499376kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1060kB inactive_anon:59864kB active_file:87380kB inactive_file:143332kB unevictable:1536kB writepending:456kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:20692kB local_pcp:18340kB free_cma:0kB [ 137.844085][ C1] net_ratelimit: 2 callbacks suppressed [ 137.858572][ T4892] lowmem_reserve[]: 0 0 0 0 0 [ 137.863937][ T4892] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.889731][ T4892] lowmem_reserve[]: 0 0 0 0 0 [ 137.894583][ T4892] Node 1 Normal free:3914944kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11364kB local_pcp:4432kB free_cma:0kB [ 137.923541][ T4892] lowmem_reserve[]: 0 0 0 0 0 [ 137.943340][ T4892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.997002][ T4892] Node 0 DMA32: 2*4kB (UE) 0*8kB 0*16kB 172*32kB (ME) 99*64kB (M) 48*128kB (ME) 25*256kB (UM) 0*512kB 1*1024kB (U) 7*2048kB (UME) 355*4096kB (M) = 1493832kB [ 138.107541][ T4892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.179016][ T4892] Node 1 Normal: 38*4kB (U) 15*8kB (UME) 19*16kB (UME) 62*32kB (UE) 35*64kB (UME) 14*128kB (UME) 3*256kB (UM) 2*512kB (UE) 1*1024kB (U) 1*2048kB (M) 953*4096kB (M) = 3914944kB [ 138.288657][ T4892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.349517][ T4892] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 138.408192][ T4892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.466968][ T4892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.529004][ T4892] 67165 total pagecache pages [ 138.554114][ T4892] 0 pages in swap cache [ 138.570538][ T4892] Swap cache stats: add 0, delete 0, find 0/0 [ 138.588943][ T4892] Free swap = 124996kB [ 138.614103][ T4892] Total swap = 124996kB [ 138.618386][ T4892] 2097051 pages RAM [ 138.642670][ T4892] 0 pages HighMem/MovableOnly [ 138.658166][ T4892] 411501 pages reserved [ 138.746137][ T4892] 0 pages cma reserved [ 138.792450][ T4923] device lo entered promiscuous mode [ 138.911579][ T4923] device tunl0 entered promiscuous mode [ 139.069480][ T4923] device gre0 entered promiscuous mode [ 140.269964][ T4923] device gretap0 entered promiscuous mode [ 141.023084][ T4923] device erspan0 entered promiscuous mode [ 141.755407][ T4923] device ip_vti0 entered promiscuous mode [ 142.333606][ T4923] device ip6_vti0 entered promiscuous mode [ 142.890260][ T4923] device sit0 entered promiscuous mode [ 142.984124][ T4923] device ip6tnl0 entered promiscuous mode [ 143.045186][ T4923] device ip6gre0 entered promiscuous mode [ 143.099223][ T4923] device syz_tun entered promiscuous mode [ 143.204981][ T4923] device ip6gretap0 entered promiscuous mode [ 143.278097][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.285635][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.304920][ T4923] device bridge0 entered promiscuous mode [ 143.360303][ T4923] device vcan0 entered promiscuous mode [ 143.401542][ T4923] device bond0 entered promiscuous mode [ 143.407720][ T4923] device bond_slave_0 entered promiscuous mode [ 143.426828][ T4923] device bond_slave_1 entered promiscuous mode [ 143.496628][ T4923] device team0 entered promiscuous mode [ 143.502234][ T4923] device team_slave_0 entered promiscuous mode [ 143.523425][ T4923] device team_slave_1 entered promiscuous mode [ 143.594170][ T4923] device dummy0 entered promiscuous mode [ 143.637342][ T4923] device nlmon0 entered promiscuous mode [ 143.653170][ T4923] device caif0 entered promiscuous mode [ 143.696409][ T4923] device batadv0 entered promiscuous mode [ 143.754594][ T4923] device vxcan0 entered promiscuous mode [ 143.775269][ T4923] device vxcan1 entered promiscuous mode [ 143.807575][ T4923] device veth0 entered promiscuous mode [ 143.864239][ T4923] device veth1 entered promiscuous mode [ 143.927909][ T4923] device wg0 entered promiscuous mode [ 143.980586][ T4923] device wg1 entered promiscuous mode [ 144.040028][ T4923] device wg2 entered promiscuous mode [ 144.099499][ T4923] device veth0_to_bridge entered promiscuous mode [ 144.220007][ T4923] device veth1_to_bridge entered promiscuous mode [ 144.358531][ T4923] device veth0_to_bond entered promiscuous mode [ 144.402618][ T4923] device veth1_to_bond entered promiscuous mode [ 144.449348][ T4923] device veth0_to_team entered promiscuous mode [ 144.508624][ T4923] device veth1_to_team entered promiscuous mode [ 144.553310][ T4923] device veth0_to_batadv entered promiscuous mode [ 144.564486][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.591365][ T4923] device batadv_slave_0 entered promiscuous mode [ 144.621135][ T4923] device veth1_to_batadv entered promiscuous mode [ 144.630318][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.646239][ T4923] device batadv_slave_1 entered promiscuous mode [ 144.663005][ T4923] device xfrm0 entered promiscuous mode [ 144.683312][ T4923] device veth0_to_hsr entered promiscuous mode [ 144.696094][ T4923] device veth1_to_hsr entered promiscuous mode [ 144.727477][ T4923] device hsr0 entered promiscuous mode [ 144.737824][ T4923] device veth1_virt_wifi entered promiscuous mode [ 144.857746][ T4923] device veth0_virt_wifi entered promiscuous mode [ 144.867779][ T4923] device virt_wifi0 entered promiscuous mode [ 144.943210][ T4923] device vlan0 entered promiscuous mode [ 144.952935][ T4923] device vlan1 entered promiscuous mode [ 144.965344][ T4923] device macvlan0 entered promiscuous mode [ 144.984985][ T4923] device macvlan1 entered promiscuous mode [ 144.998527][ T4923] device ipvlan0 entered promiscuous mode [ 145.005637][ T4923] device ipvlan1 entered promiscuous mode [ 145.036945][ T4923] device macvtap0 entered promiscuous mode [ 145.078238][ T4923] device macsec0 entered promiscuous mode [ 145.095422][ T4923] device geneve0 entered promiscuous mode [ 145.111167][ T4923] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.120290][ T4923] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.134961][ T4923] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.144340][ T4923] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.153654][ T4923] device geneve1 entered promiscuous mode [ 145.167752][ T4923] device netdevsim0 entered promiscuous mode [ 145.190970][ T4923] device netdevsim1 entered promiscuous mode [ 145.209293][ T4923] device netdevsim2 entered promiscuous mode [ 145.218974][ T4923] device netdevsim3 entered promiscuous mode [ 145.235977][ T4923] device wlan0 entered promiscuous mode [ 145.250573][ T4923] device wlan1 entered promiscuous mode [ 145.283944][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 145.480340][ T4947] device syzkaller0 entered promiscuous mode [ 145.711623][ T4384] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.534433][ T4384] usb 5-1: device descriptor read/all, error -71 [ 148.774380][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 149.144822][ T4998] device syzkaller0 entered promiscuous mode [ 149.424574][ T5001] device syzkaller0 entered promiscuous mode [ 152.655230][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 152.694170][ T4384] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.593394][ T5059] device syzkaller0 entered promiscuous mode [ 155.880015][ T4384] usb 5-1: device not accepting address 5, error -71 [ 157.247723][ T5086] 9pnet_virtio: no channels available for device syz [ 157.256391][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 157.661516][ T5094] device syzkaller0 entered promiscuous mode [ 158.738974][ T5109] Cannot find set identified by id 0 to match [ 160.824156][ T4228] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.065407][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 161.204641][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.233935][ T4228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 161.296922][ T4228] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 161.345635][ T4228] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 162.200273][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.406239][ T5160] Cannot find set identified by id 0 to match [ 162.474570][ T4228] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 162.520201][ T4228] usb 1-1: USB disconnect, device number 5 [ 162.565854][ T5163] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 162.592640][ T5163] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 162.925958][ T5175] device syzkaller0 entered promiscuous mode [ 163.087129][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.236392][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.283448][ T5177] bond0: (slave bond_slave_0): Releasing backup interface [ 164.158545][ T5177] bond0: (slave bond_slave_1): Releasing backup interface [ 164.185099][ T5177] team0: Port device team_slave_0 removed [ 164.193077][ T5177] team0: Port device team_slave_1 removed [ 164.221832][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.241845][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.262452][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 164.702811][ T5199] device syzkaller0 entered promiscuous mode [ 164.922829][ T5210] device syzkaller0 entered promiscuous mode [ 164.938502][ T5216] Cannot find set identified by id 0 to match [ 165.108430][ T5221] 9pnet_virtio: no channels available for device syz [ 166.089467][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 166.237540][ T5238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.264'. [ 166.466671][ T5244] tipc: Started in network mode [ 166.481520][ T5244] tipc: Node identity ac1414aa, cluster identity 4711 [ 166.500855][ T5244] tipc: New replicast peer: 172.20.20.187 [ 166.512644][ T5244] tipc: Enabled bearer , priority 10 [ 166.671779][ T5247] device syzkaller0 entered promiscuous mode [ 166.828369][ T5254] device syzkaller0 entered promiscuous mode [ 167.065739][ T5259] Cannot find set identified by id 0 to match [ 167.153837][ T5262] capability: warning: `syz.0.272' uses deprecated v2 capabilities in a way that may be insecure [ 167.681227][ T4236] tipc: Node number set to 2886997162 [ 168.255063][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 168.743232][ T5290] device syzkaller0 entered promiscuous mode [ 168.895982][ T5297] device syzkaller0 entered promiscuous mode [ 169.231369][ T5306] Cannot find set identified by id 0 to match [ 170.332354][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 170.370289][ T5323] 9pnet_virtio: no channels available for device syz [ 170.721073][ T5325] device syzkaller0 entered promiscuous mode [ 170.827320][ T5339] device syzkaller0 entered promiscuous mode [ 171.244794][ T5351] Cannot find set identified by id 0 to match [ 172.325604][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 172.425834][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 172.823092][ T5372] device syzkaller0 entered promiscuous mode [ 172.849897][ T5378] device syzkaller0 entered promiscuous mode [ 173.028787][ T5385] Cannot find set identified by id 0 to match [ 174.220451][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 174.230887][ T5403] comedi comedi1: Minor 0 could not be opened [ 175.004961][ T5417] device syzkaller0 entered promiscuous mode [ 176.576159][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 176.822036][ T5463] jffs2: notice: (5463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 177.221059][ T5471] device syzkaller0 entered promiscuous mode [ 178.649095][ T5491] device syzkaller0 entered promiscuous mode [ 178.812333][ T4342] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.079236][ T5499] device syzkaller0 entered promiscuous mode [ 179.174380][ T4342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.194989][ T4342] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 179.235251][ T4342] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.282687][ T4342] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 179.314213][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.568052][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 179.679228][ T4342] cxacru 5-1:1.0: invalid response length to cm 0x90: 60 [ 180.898535][ T4384] usb 5-1: USB disconnect, device number 7 [ 180.946017][ T5531] device vlan2 entered promiscuous mode [ 181.090446][ T5535] device syzkaller0 entered promiscuous mode [ 181.408721][ T5539] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 181.424356][ T5539] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 181.736944][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 181.827190][ T5556] Cannot find set identified by id 0 to match [ 183.125156][ T5576] device syzkaller0 entered promiscuous mode [ 183.382896][ T5594] Cannot find set identified by id 0 to match [ 183.432344][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 183.710297][ T4625] hid-generic 0005:15C2:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 184.730087][ T5628] Cannot find set identified by id 0 to match [ 184.765343][ T5631] device syzkaller1 entered promiscuous mode [ 184.852918][ T5634] device syzkaller0 entered promiscuous mode [ 184.863971][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 185.089474][ T5641] syz.0.402 uses obsolete (PF_INET,SOCK_PACKET) [ 185.184549][ T4625] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 185.484235][ T4625] usb 2-1: Using ep0 maxpacket: 8 [ 185.574661][ T5659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.624612][ T4625] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 185.645729][ T4625] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.668624][ T4625] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.689169][ T4625] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.712089][ T5657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.760418][ T4625] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.791442][ T4625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.064487][ T4625] usb 2-1: GET_CAPABILITIES returned 0 [ 186.070353][ T4625] usbtmc 2-1:16.0: can't read capabilities [ 186.087587][ T5676] Cannot find set identified by id 0 to match [ 186.189922][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 186.280789][ T4625] usb 2-1: USB disconnect, device number 3 [ 186.499206][ T5691] device syzkaller0 entered promiscuous mode [ 187.852333][ T5721] ======================================================= [ 187.852333][ T5721] WARNING: The mand mount option has been deprecated and [ 187.852333][ T5721] and is ignored by this kernel. Remove the mand [ 187.852333][ T5721] option from the mount to silence this warning. [ 187.852333][ T5721] ======================================================= [ 188.153115][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 188.312405][ T5733] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 188.407853][ T5735] device syzkaller0 entered promiscuous mode [ 188.794476][ T5756] Cannot find set identified by id 0 to match [ 188.887105][ T4192] ------------[ cut here ]------------ [ 188.892998][ T4192] WARNING: CPU: 0 PID: 4192 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 188.904470][ T4192] Modules linked in: [ 188.908523][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 188.917401][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.928787][ T4192] Workqueue: hci2 hci_conn_timeout [ 188.934175][ T4192] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 188.939975][ T4192] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 188.959959][ T4192] RSP: 0018:ffffc90002f7fc08 EFLAGS: 00010293 [ 188.966212][ T4192] RAX: ffffffff88e08a1f RBX: ffff88807aea0138 RCX: ffff888079421dc0 [ 188.974420][ T4192] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 188.982513][ T4192] RBP: 00000000ffffffff R08: ffffc90002f7f5a7 R09: 1ffff920005efeb4 [ 188.991221][ T4192] R10: dffffc0000000000 R11: fffff520005efeb5 R12: ffff88802d5ac408 [ 188.999399][ T4192] R13: dffffc0000000000 R14: ffff88807aea0000 R15: ffffffff8b30d538 [ 189.007549][ T4192] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.016601][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.023315][ T4192] CR2: 00007fbd5247e158 CR3: 0000000063ff7000 CR4: 00000000003506f0 [ 189.031506][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.039636][ T4192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.047930][ T4192] Call Trace: [ 189.051364][ T4192] [ 189.054440][ T4192] process_one_work+0x867/0xff0 [ 189.059431][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 189.065326][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 189.070826][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.076316][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.081999][ T4192] ? wq_worker_running+0x97/0x170 [ 189.087336][ T4192] worker_thread+0xad7/0x12a0 [ 189.092180][ T4192] kthread+0x42e/0x520 [ 189.096399][ T4192] ? rcu_lock_release+0x20/0x20 [ 189.101415][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 189.106224][ T4192] ret_from_fork+0x1f/0x30 [ 189.110763][ T4192] [ 189.113946][ T4192] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.121255][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 189.128830][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.138025][ T3559] kobject: 'loop3' (ffff88801d8e6a00): kobject_uevent_env [ 189.138912][ T4192] Workqueue: hci2 hci_conn_timeout [ 189.138978][ T4192] Call Trace: [ 189.138987][ T4192] [ 189.138995][ T4192] dump_stack_lvl+0x188/0x250 [ 189.139019][ T4192] ? show_regs_print_info+0x20/0x20 [ 189.167640][ T4192] ? load_image+0x410/0x410 [ 189.172199][ T4192] panic+0x2f8/0x850 [ 189.176145][ T4192] ? bpf_jit_dump+0xd0/0xd0 [ 189.180694][ T4192] ? ret_from_fork+0x1f/0x30 [ 189.185329][ T4192] ? hci_conn_timeout+0x24f/0x450 [ 189.190391][ T4192] __warn+0x248/0x2b0 [ 189.194417][ T4192] ? hci_conn_timeout+0x24f/0x450 [ 189.199481][ T4192] report_bug+0x1b9/0x2e0 [ 189.203853][ T4192] handle_bug+0x3a/0x70 [ 189.208054][ T4192] exc_invalid_op+0x16/0x40 [ 189.213138][ T4192] asm_exc_invalid_op+0x16/0x20 [ 189.218024][ T4192] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.222172][ T3559] kobject: 'loop3' (ffff88801d8e6a00): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 189.223694][ T4192] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.223716][ T4192] RSP: 0018:ffffc90002f7fc08 EFLAGS: 00010293 [ 189.223738][ T4192] RAX: ffffffff88e08a1f RBX: ffff88807aea0138 RCX: ffff888079421dc0 [ 189.267605][ T4192] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.275698][ T4192] RBP: 00000000ffffffff R08: ffffc90002f7f5a7 R09: 1ffff920005efeb4 [ 189.283702][ T4192] R10: dffffc0000000000 R11: fffff520005efeb5 R12: ffff88802d5ac408 [ 189.291717][ T4192] R13: dffffc0000000000 R14: ffff88807aea0000 R15: ffffffff8b30d538 [ 189.299079][ T5760] kcov: kcov_start: t = ffff888050e13b80, size = 524288, area = ffffc90005c3a000 [ 189.299725][ T4192] ? hci_conn_timeout+0x24f/0x450 [ 189.313889][ T4192] ? hci_conn_timeout+0x24f/0x450 [ 189.318964][ T4192] process_one_work+0x867/0xff0 [ 189.323879][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 189.329548][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 189.334895][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.339975][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.345564][ T4192] ? wq_worker_running+0x97/0x170 [ 189.350644][ T4192] worker_thread+0xad7/0x12a0 [ 189.355386][ T4192] kthread+0x42e/0x520 [ 189.359494][ T4192] ? rcu_lock_release+0x20/0x20 [ 189.364385][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 189.369011][ T4192] ret_from_fork+0x1f/0x30 [ 189.373488][ T4192] [ 189.374695][ T4664] inotify_handle_inode_event: group=ffff8880179bb000 mark=ffff88802c1afc80 mask=8000 [ 189.376832][ T4192] Kernel Offset: disabled [ 189.390667][ T4192] Rebooting in 86400 seconds..