last executing test programs: 1m55.763863104s ago: executing program 1 (id=53): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m49.991041349s ago: executing program 1 (id=60): socket(0x2b, 0x80801, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x20000020) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 1m47.950333433s ago: executing program 1 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) accept4(r1, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1m45.928709435s ago: executing program 1 (id=69): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d30000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) creat(&(0x7f0000000080)='./file0\x00', 0x248) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 1m39.135665433s ago: executing program 1 (id=77): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m34.494257085s ago: executing program 1 (id=86): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m19.12872132s ago: executing program 32 (id=86): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 25.762898837s ago: executing program 5 (id=218): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23.662533941s ago: executing program 5 (id=221): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, 0x0, 0x0, 0x800041, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x1000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x10080a1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_ublk_setup_io_uring(0x4653, &(0x7f0000000540)={0x0, 0xda76, 0x8, 0x3, 0x39e, 0x0, r1}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0xc0d4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="44008390ba068768a9e4f6f6baf29b9f8490db92edb601901e0bd326136a540000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c61d7000000000c000280060001000100000008000580", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0b07f0001e00000000000b00000034b8dd5db64aff421f120c5b81d1bd50946a29e2fda723ab21ecb03f3781e914330e5f5da72c3ef5c643c0a3fbe4c81b105d163e3fad2313adc93d304e171563dbd98ac3a477a8455b2a93871ee0363503797a911314b717458e2d373dbcc97402a5b579a7c29e52d9c30dc263564f970e57d1234ce27df8fc9d42849114d56e6276262bfa3b60bb190b1bac37fcb22ef7c21ba70a"], 0x14}}, 0x4000010) close_range(r6, 0xffffffffffffffff, 0x0) 20.897601342s ago: executing program 0 (id=227): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d30000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) creat(&(0x7f0000000080)='./file0\x00', 0x248) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 18.49258318s ago: executing program 3 (id=232): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_GET_THP_DISABLE(0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r5, 0x5460, 0x0) openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) socket(0x2a, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x200) writev(r4, 0x0, 0x0) 18.117914234s ago: executing program 0 (id=234): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85914000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x10000004}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 17.173740895s ago: executing program 3 (id=235): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000020) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 15.427498775s ago: executing program 5 (id=236): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 15.291034366s ago: executing program 3 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 14.511412625s ago: executing program 3 (id=239): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) openat(r3, &(0x7f00000002c0)='./bus\x00', 0x980, 0xa0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 14.221743109s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) getpgid(r1) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x400000, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x804c000) getgroups(0x0, &(0x7f0000008500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)='./file2\x00') bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)='\b', 0x1}}, 0x4004001) 10.982046305s ago: executing program 2 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.53572739s ago: executing program 4 (id=247): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 9.434930212s ago: executing program 0 (id=248): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, &(0x7f0000000100)={""/4, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) dup(r4) unshare(0x60480) io_setup(0x42000001, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000001e00)=[0x0]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) 8.738201951s ago: executing program 4 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000540)=@multiplanar_fd={0x3ff, 0x2, 0x4, 0x40, 0x1000, {}, {0x3, 0x0, 0x7, 0xed, 0x8, 0x40, "d23ec30b"}, 0x20000000, 0x4, {0x0}, 0x8a52000}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000300)=@userptr={0x5, 0x2, 0x4, 0x0, 0x6, {0x77359400}, {0x2, 0x1, 0x7f, 0x6, 0xd, 0x9, "7ee91112"}, 0x81, 0x2, {0x0}, 0xfffffffe}) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.071079128s ago: executing program 5 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 7.690948693s ago: executing program 0 (id=251): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x85914000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x10000004}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 6.669277434s ago: executing program 2 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) getpgid(r1) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x400000, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x804c000) getgroups(0x0, &(0x7f0000008500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)='./file2\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)='\b', 0x1}}, 0x4004001) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400)={0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x33) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000440)={0x0, 0x6, 0x6, 0x9, 0x1, [0x0, 0x0, 0x0, r5], [0x9, 0x6, 0x94, 0x7fffffff], [0x1, 0x2, 0x1000, 0x9], [0x58, 0x5d, 0x7fff, 0x89]}) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x200) 5.717549055s ago: executing program 3 (id=253): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010300000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008001e40ffffffff05000500020000000500010006"], 0x60}}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000400)) 5.21053478s ago: executing program 5 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28cd03569ae6446b6217dbbf0000000308010297ce68f10000000003b6401d7164415dec125ec6b256e030190010020c800800b440000000080000deff04000001"], 0x28}, 0x1, 0x0, 0x0, 0x4015}, 0x4004890) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000340)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r2], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 5.175549191s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x10b902) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet6(0xa, 0x80003, 0xff) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000140)=""/184, 0x1b}], 0x1) syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r8, 0x400454ce, 0xffffffffffffffff) 3.228509403s ago: executing program 4 (id=256): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d30000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) creat(&(0x7f0000000080)='./file0\x00', 0x248) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 3.210752254s ago: executing program 0 (id=257): r0 = creat(0x0, 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) 1.867877249s ago: executing program 4 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) getpgid(r1) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x400000, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x804c000) getgroups(0x0, &(0x7f0000008500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)='\b', 0x1}}, 0x4004001) 1.804893199s ago: executing program 3 (id=259): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x16, 0x2, "5db8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.76201935s ago: executing program 5 (id=260): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d0000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c, 0x0}}], 0x1, 0x4c040) 1.147431437s ago: executing program 2 (id=261): syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 879.31396ms ago: executing program 2 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 668.509323ms ago: executing program 4 (id=263): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 486.939485ms ago: executing program 2 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802", 0xf}], 0x2) 0s ago: executing program 2 (id=265): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 78.822775][ T4260] cgroup: Unknown subsys name 'net' [ 78.955516][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.532400][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.954621][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.962829][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.971337][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.979468][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.987642][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.995554][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.002884][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.026174][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.040237][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.048929][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.056553][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.064587][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.105033][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.114141][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.118171][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.129732][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.136975][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.139684][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.146557][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.154895][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.161553][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.167272][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.174567][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.199122][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.246711][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.255131][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.263656][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.272015][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.280370][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.287666][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.591245][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 82.710522][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.718464][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.740314][ T4281] device bridge_slave_0 entered promiscuous mode [ 82.751892][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.768994][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.789268][ T4281] device bridge_slave_1 entered promiscuous mode [ 82.822366][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 82.845395][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 82.863359][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 82.874255][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 82.904854][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.957098][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.043040][ T4281] team0: Port device team_slave_0 added [ 83.055001][ T4281] team0: Port device team_slave_1 added [ 83.114549][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.125364][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.133455][ T4285] device bridge_slave_0 entered promiscuous mode [ 83.144909][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.152317][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.160416][ T4272] device bridge_slave_0 entered promiscuous mode [ 83.197978][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.206547][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.214885][ T4285] device bridge_slave_1 entered promiscuous mode [ 83.222650][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.230145][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.238062][ T4272] device bridge_slave_1 entered promiscuous mode [ 83.245709][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.256434][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.264587][ T4283] device bridge_slave_0 entered promiscuous mode [ 83.276132][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.283482][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.309711][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.322285][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.330427][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.338346][ T4273] device bridge_slave_0 entered promiscuous mode [ 83.362430][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.369789][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.377734][ T4283] device bridge_slave_1 entered promiscuous mode [ 83.385317][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.392570][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.419990][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.431616][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.442085][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.450233][ T4273] device bridge_slave_1 entered promiscuous mode [ 83.479605][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.506863][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.534508][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.564272][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.584278][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.595610][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.607451][ T4272] team0: Port device team_slave_0 added [ 83.624467][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.636436][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.647259][ T4272] team0: Port device team_slave_1 added [ 83.671011][ T4285] team0: Port device team_slave_0 added [ 83.698934][ T4285] team0: Port device team_slave_1 added [ 83.733175][ T4281] device hsr_slave_0 entered promiscuous mode [ 83.741469][ T4281] device hsr_slave_1 entered promiscuous mode [ 83.756867][ T4283] team0: Port device team_slave_0 added [ 83.765354][ T4283] team0: Port device team_slave_1 added [ 83.772247][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.779688][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.808322][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.822848][ T4273] team0: Port device team_slave_0 added [ 83.852702][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.860191][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.886810][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.905043][ T4273] team0: Port device team_slave_1 added [ 83.922354][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.929969][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.957775][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.976794][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.984355][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.010498][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.045409][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.053270][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.088807][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.108316][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.115390][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.121995][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 84.148847][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 84.157932][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.198884][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 84.214384][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.224985][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.254884][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.278929][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 84.286241][ T4285] device hsr_slave_0 entered promiscuous mode [ 84.295398][ T4285] device hsr_slave_1 entered promiscuous mode [ 84.302265][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.310561][ T4285] Cannot create hsr debugfs directory [ 84.318075][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.325835][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.352469][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.369039][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 84.413703][ T4272] device hsr_slave_0 entered promiscuous mode [ 84.422136][ T4272] device hsr_slave_1 entered promiscuous mode [ 84.429184][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.436817][ T4272] Cannot create hsr debugfs directory [ 84.457646][ T4283] device hsr_slave_0 entered promiscuous mode [ 84.465194][ T4283] device hsr_slave_1 entered promiscuous mode [ 84.472296][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.480056][ T4283] Cannot create hsr debugfs directory [ 84.528590][ T4273] device hsr_slave_0 entered promiscuous mode [ 84.536097][ T4273] device hsr_slave_1 entered promiscuous mode [ 84.543340][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.551399][ T4273] Cannot create hsr debugfs directory [ 84.834580][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.884899][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.917012][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.944518][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.974735][ T4285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.986354][ T4285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.000037][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.014674][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.112328][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.132555][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.144116][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.157671][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.233826][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.245308][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.273944][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.284498][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.357931][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.386162][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.399720][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.408273][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.431165][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.440858][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.460835][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.481705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.492138][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.507151][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.515489][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.547845][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.557215][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.565611][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.583940][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.600522][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.619649][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.630449][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.643258][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.650910][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.661370][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.672253][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.681298][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.688895][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.727723][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.736678][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.747790][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.758167][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.769865][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.777045][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.786332][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.795552][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.811365][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.818464][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.827394][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.836541][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.845887][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.853172][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.862161][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.872172][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.880935][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.888099][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.896380][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.905848][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.915148][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.942204][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.956050][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.000554][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.011369][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.021372][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.034786][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.044731][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.054481][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.063973][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.073301][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.082784][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.093662][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.103837][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.113959][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.122773][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.131579][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.142702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.153972][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.181485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.193825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.202018][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 86.209505][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 86.217206][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.226325][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.235688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.245483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.267052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.277795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.285772][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 86.296451][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.305007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.320753][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.331053][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.348539][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.356128][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.366027][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.370437][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 86.392408][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.411869][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.443221][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 86.451756][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.479688][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.488407][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.499633][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.508176][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.518059][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.528553][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.536424][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.551431][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.564531][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.576197][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.593929][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.603507][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.618074][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.627346][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.643456][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.650871][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.694565][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.712477][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.740291][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.759419][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.766607][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.789567][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.809253][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.826470][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.833708][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.850984][ T14] cfg80211: failed to load regulatory.db [ 86.880795][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.901296][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.954353][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.971054][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.011495][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.040228][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.059661][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.068620][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.085983][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.102375][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.129951][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.169191][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.181587][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.206964][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.236391][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.266115][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.307094][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.316867][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.343952][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.375346][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.386274][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.408390][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.427210][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.444965][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.460770][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.476293][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.489957][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.510501][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.530465][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.561549][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.633747][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.644043][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.673388][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.709409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.769549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.810361][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.841712][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.893685][ T4281] device veth0_vlan entered promiscuous mode [ 87.915573][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.925162][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.949849][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.969458][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.982068][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.026027][ T4281] device veth1_vlan entered promiscuous mode [ 88.127968][ T4281] device veth0_macvtap entered promiscuous mode [ 88.192389][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.223494][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.261056][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.270134][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.279161][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 88.279524][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 88.291891][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.322535][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.352441][ T4281] device veth1_macvtap entered promiscuous mode [ 88.359023][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 88.397201][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.415045][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.429759][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.440098][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 88.446723][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.470508][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.504517][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.519991][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 88.531449][ T4283] device veth0_vlan entered promiscuous mode [ 88.567872][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.592086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.604288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.614821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.627071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.638408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.650600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.664518][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.696215][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.707297][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.719715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.733806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.776645][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.799050][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.808016][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.828893][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.863871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.873141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.892967][ T4283] device veth1_vlan entered promiscuous mode [ 88.929148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.938001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.965199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.978046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.995163][ T4273] device veth0_vlan entered promiscuous mode [ 89.022553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.036608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.054073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.063969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.105539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.124252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.139893][ T4273] device veth1_vlan entered promiscuous mode [ 89.152886][ T4272] device veth0_vlan entered promiscuous mode [ 89.172339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.186464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.195578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.206723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.215705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.227016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.236855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.245957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.256714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.266090][ T4285] device veth0_vlan entered promiscuous mode [ 89.286684][ T4283] device veth0_macvtap entered promiscuous mode [ 89.323324][ T4272] device veth1_vlan entered promiscuous mode [ 89.343762][ T4283] device veth1_macvtap entered promiscuous mode [ 89.352217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.361796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.371649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.381533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.390683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.400830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.414785][ T4273] device veth0_macvtap entered promiscuous mode [ 89.424721][ T4285] device veth1_vlan entered promiscuous mode [ 89.454327][ T4273] device veth1_macvtap entered promiscuous mode [ 89.462923][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.477485][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.494157][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.507922][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.520744][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.540447][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.549629][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.557955][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.569471][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.577827][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.586819][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.595134][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.604977][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.635854][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.648402][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.653903][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.658220][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.681644][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.696113][ T4272] device veth0_macvtap entered promiscuous mode [ 89.715037][ T4272] device veth1_macvtap entered promiscuous mode [ 89.723352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.732442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.742591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.752184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.766072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.775355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.785459][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.796857][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.807708][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.819025][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.831056][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.858362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.870584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.882341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.895336][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.904945][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.914309][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.923623][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944249][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.956854][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.972371][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.982975][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.995449][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.008558][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.024246][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034456][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.045773][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071326][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.080950][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.090548][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.100575][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.113354][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.133603][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.147987][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.186616][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.207923][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.223512][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.238605][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.250671][ T4285] device veth0_macvtap entered promiscuous mode [ 90.271112][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.289236][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.305038][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.359766][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 90.363566][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 90.439132][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 90.528907][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 90.599143][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 90.841533][ T4285] device veth1_macvtap entered promiscuous mode [ 90.863846][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.896085][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.937942][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.977111][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.016208][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.066544][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.210007][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.236668][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.246315][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.257293][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.368644][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368922][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.391753][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.425715][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.442296][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.463059][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.474068][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.491059][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532301][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.540961][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.551256][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.560819][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.570046][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.581848][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.597255][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.608205][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.619095][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.629192][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.640389][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.651643][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.662418][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.674205][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.691517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.701794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.716238][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.734311][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.744936][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.761014][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.774065][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.785425][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.795801][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.809725][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.824423][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.844309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.854011][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.877367][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886347][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895522][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.904408][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935230][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.964223][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.021687][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.340323][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.348322][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.370354][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.455313][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.565060][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.692060][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.756268][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.859907][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.886564][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.895212][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.904398][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.921310][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.965912][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.998717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.034646][ T4396] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.11'. [ 96.138703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.529224][ T4407] netlink: 'syz.4.13': attribute type 4 has an invalid length. [ 96.536935][ T4407] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13'. [ 97.223321][ T4407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.071794][ T4470] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.24'. [ 102.986694][ T4485] Zero length message leads to an empty skb [ 103.866144][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 105.468746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 106.048728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.068710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.078706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.088708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.098710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.108703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.118713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 108.221404][ T4518] sched: RT throttling activated [ 108.958951][ T4526] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.40'. [ 113.317141][ T4557] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 113.599050][ T4335] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.833416][ T4335] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 113.858499][ T4335] usb 1-1: config 0 has no interface number 0 [ 113.882013][ T4335] usb 1-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xD8, skipping [ 113.927118][ T4569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 113.938835][ T4335] usb 1-1: config 0 interface 200 has no altsetting 0 [ 114.482342][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 114.546686][ T4335] usb 1-1: string descriptor 0 read error: -71 [ 115.316222][ T4335] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 115.348012][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.388580][ T4335] usb 1-1: config 0 descriptor?? [ 115.404824][ T4335] usb 1-1: can't set config #0, error -71 [ 115.455463][ T4335] usb 1-1: USB disconnect, device number 2 [ 118.425149][ T4597] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 119.514665][ T4597] netlink: 152 bytes leftover after parsing attributes in process `syz.3.57'. [ 119.613899][ T4597] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 124.976009][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 127.925280][ T4650] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 128.299086][ T4655] futex_wake_op: syz.3.73 tries to shift op by 144; fix this program [ 129.638797][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 129.645240][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.930206][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937029][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.612375][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 139.784022][ T4721] netlink: 'syz.2.91': attribute type 4 has an invalid length. [ 139.828253][ T4721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.91'. [ 139.915859][ T4721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.173236][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 148.524648][ T4785] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 148.532596][ T4785] netlink: 152 bytes leftover after parsing attributes in process `syz.4.106'. [ 148.543825][ T4785] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 149.046618][ T4335] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 149.437913][ T4335] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 149.499875][ T4335] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.526912][ T4335] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.587885][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.614665][ T4335] usb 3-1: Product: syz [ 149.625149][ T4335] usb 3-1: Manufacturer: syz [ 149.643941][ T4335] usb 3-1: SerialNumber: syz [ 149.669119][ T4335] usb 3-1: config 0 descriptor?? [ 149.699895][ T4784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 149.726111][ T4335] usb 3-1: selecting invalid altsetting 0 [ 150.008763][ T4323] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.090852][ T4801] overlayfs: failed to resolve './file0': -2 [ 150.218739][ T4323] usb 1-1: Using ep0 maxpacket: 16 [ 150.236687][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.248360][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.260026][ T4323] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 150.314478][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.405807][ T4323] usb 1-1: config 0 descriptor?? [ 151.089323][ T4323] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 151.125990][ T4323] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 151.157084][ T4323] usb 1-1: USB disconnect, device number 3 [ 151.336807][ T4812] fido_id[4812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 151.439335][ T4335] usb 3-1: USB disconnect, device number 2 [ 151.631270][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.641573][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.649407][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.662063][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.670035][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.678465][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.924230][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 153.879208][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 154.585927][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 155.080307][ T4384] Bluetooth: hci6: Frame reassembly failed (-84) [ 155.361205][ T4384] Bluetooth: hci6: Frame reassembly failed (-84) [ 155.961284][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 156.137397][ T4844] device syzkaller0 entered promiscuous mode [ 156.144700][ T4842] netlink: 'syz.2.121': attribute type 4 has an invalid length. [ 156.153465][ T4842] netlink: 152 bytes leftover after parsing attributes in process `syz.2.121'. [ 156.164719][ T4842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.999358][ T4280] Bluetooth: hci6: command 0x1003 tx timeout [ 157.000148][ T4279] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 157.202597][ T4861] Bluetooth: MGMT ver 1.22 [ 158.038921][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 159.845164][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.978074][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.118945][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 160.177675][ T4815] device bridge_slave_0 entered promiscuous mode [ 160.444291][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.593955][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.664950][ T4815] device bridge_slave_1 entered promiscuous mode [ 160.850195][ T4404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.131375][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.158577][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.337424][ T4815] team0: Port device team_slave_0 added [ 161.362575][ T4815] team0: Port device team_slave_1 added [ 162.097890][ T4404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.302214][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.408726][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.450851][ T4897] process 'syz.0.135' launched './file0' with NULL argv: empty string added [ 162.545988][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.757992][ T4404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.772141][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.790436][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.817933][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.027206][ T4404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.915938][ T4815] device hsr_slave_0 entered promiscuous mode [ 163.957483][ T4815] device hsr_slave_1 entered promiscuous mode [ 163.966615][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.984235][ T4815] Cannot create hsr debugfs directory [ 165.726876][ T4815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.791244][ T4815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.204465][ T4944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.146'. [ 167.271300][ T4815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.307120][ T4815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.396011][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.668001][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.908345][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.997437][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.231775][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.437711][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.475091][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.482301][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.780798][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.812842][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.823932][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.845258][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.852690][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.013225][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.029104][ T22] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 172.045290][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.066575][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.091967][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.110834][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.133182][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.251333][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.281383][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.308321][ T22] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.318749][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.355621][ T22] usb 5-1: config 0 descriptor?? [ 172.394715][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 172.403324][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 172.434253][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.447192][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 172.464681][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 172.488818][ T22] usb 5-1: media controller created [ 172.498048][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.504887][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.524522][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 172.531401][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 172.609229][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.645045][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 172.766161][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 172.800790][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 172.965510][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 172.993008][ T22] dvb-usb: error while querying for an remote control event. [ 173.028310][ T4404] device hsr_slave_0 left promiscuous mode [ 173.055756][ T4404] device hsr_slave_1 left promiscuous mode [ 173.069388][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.180072][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 173.180602][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.186098][ T22] dvb-usb: error while querying for an remote control event. [ 173.203862][ T5007] dvb-usb: bulk message failed: -22 (4/0) [ 173.285805][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.297614][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.657558][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 173.662009][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.666801][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 173.674165][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.687959][ T4280] Bluetooth: hci1: hardware error 0x00 [ 173.694763][ T4404] device bridge_slave_1 left promiscuous mode [ 173.737692][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.791388][ T4404] device bridge_slave_0 left promiscuous mode [ 173.812002][ T5009] xt_hashlimit: size too large, truncated to 1048576 [ 173.825071][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.848342][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 173.866342][ T4322] dvb-usb: error while querying for an remote control event. [ 173.896666][ T4322] usb 5-1: USB disconnect, device number 2 [ 173.967305][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 174.008270][ T4404] device veth1_macvtap left promiscuous mode [ 174.017314][ T4404] device veth0_macvtap left promiscuous mode [ 175.784033][ T4280] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 176.483546][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 176.534388][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 176.580457][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.632466][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.038546][ T4404] bond0 (unregistering): Released all slaves [ 177.162854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.172432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.299778][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.612295][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.653618][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.669164][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.377047][ T5076] device syzkaller0 entered promiscuous mode [ 185.068709][ T5087] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 185.096880][ T5087] netlink: 152 bytes leftover after parsing attributes in process `syz.0.180'. [ 185.166510][ T5087] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 187.369344][ T5126] netlink: 'syz.4.188': attribute type 5 has an invalid length. [ 188.319583][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 188.918837][ T5126] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.928133][ T5126] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.936977][ T5126] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.945790][ T5126] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.124563][ T5126] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.133669][ T5126] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.142725][ T5126] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.151878][ T5126] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.161234][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 189.173626][ T4326] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 189.197371][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.205866][ T4326] usb 4-1: Product: syz [ 189.215752][ T4326] usb 4-1: Manufacturer: syz [ 189.220783][ T4326] usb 4-1: SerialNumber: syz [ 189.236745][ T4326] usb 4-1: config 0 descriptor?? [ 189.255261][ T4326] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 189.377487][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.424989][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.452249][ T4326] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 189.471413][ T4326] visor: probe of 4-1:0.0 failed with error -71 [ 189.530848][ T4326] usb 4-1: USB disconnect, device number 2 [ 189.600240][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.628485][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.669698][ T4815] device veth0_vlan entered promiscuous mode [ 189.677521][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.720402][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.766133][ T4815] device veth1_vlan entered promiscuous mode [ 189.861480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.880402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.899540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.919382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.985107][ T4815] device veth0_macvtap entered promiscuous mode [ 190.027138][ T4815] device veth1_macvtap entered promiscuous mode [ 190.411658][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.428024][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.438124][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.459337][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.513101][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.557032][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.591967][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.624278][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.656755][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.719933][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.935269][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.962172][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.984966][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.019521][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.096128][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.137678][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.295970][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.413082][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.587611][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.737332][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.909387][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.014099][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.061066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.120518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.193544][ T4815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.207981][ T4815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.330299][ T5162] input: syz1 as /devices/virtual/input/input6 [ 192.365101][ T4815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.374106][ T4815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.371969][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 194.380986][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388113][ T4280] Bluetooth: hci2: Injecting HCI hardware error event [ 194.396439][ T4280] Bluetooth: hci2: hardware error 0x00 [ 194.403239][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.770211][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.788873][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.796809][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.937507][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.954603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.016846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.748832][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 203.233627][ T5245] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 206.688801][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 206.688813][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 206.918947][ T4326] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 206.995832][ T5282] Unsupported ieee802154 address type: 0 [ 208.030594][ T4326] usb 6-1: Using ep0 maxpacket: 8 [ 208.413505][ T4326] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.738585][ T4326] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.128881][ T4326] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.138099][ T4326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.214665][ T4326] usbtmc 6-1:16.0: bulk endpoints not found [ 210.245202][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 214.217740][ T4321] usb 6-1: USB disconnect, device number 2 [ 214.395001][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 217.733352][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 219.138768][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 219.358983][ T4321] usb 3-1: Using ep0 maxpacket: 32 [ 219.376885][ T4321] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 219.461411][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.912164][ T4321] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 220.919538][ T4321] gspca_nw80x: reg_r err -110 [ 220.924385][ T4321] nw80x: probe of 3-1:3.0 failed with error -110 [ 221.807622][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 222.904390][ T7] usb 3-1: USB disconnect, device number 3 [ 226.245717][ T4496] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.403109][ T5404] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 226.449085][ T5404] netlink: 152 bytes leftover after parsing attributes in process `syz.3.253'. [ 226.496533][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 226.508792][ T5404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.278851][ T4279] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.279283][ T4280] Bluetooth: hci0: command 0x1003 tx timeout [ 228.738770][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 228.954439][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 228.975444][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.030437][ T4323] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 229.060054][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.105431][ T4323] usb 4-1: config 0 descriptor?? [ 229.143352][ T4323] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 229.377054][ T5449] tipc: Started in network mode [ 229.392825][ T5449] tipc: Node identity b2eca97d106d, cluster identity 4711 [ 229.415863][ T5449] tipc: Enabled bearer , priority 0 [ 229.466030][ T5447] tipc: Disabling bearer [ 229.895485][ T5454] ================================================================== [ 229.903643][ T5454] BUG: KASAN: global-out-of-bounds in try_module_get+0x4f/0xf0 [ 229.911801][ T5454] Write of size 4 at addr ffffffff8b031c30 by task syz.2.265/5454 [ 229.920003][ T5454] [ 229.922435][ T5454] CPU: 1 PID: 5454 Comm: syz.2.265 Not tainted syzkaller #0 [ 229.929848][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.939966][ T5454] Call Trace: [ 229.943308][ T5454] [ 229.946283][ T5454] dump_stack_lvl+0x188/0x24e [ 229.951031][ T5454] ? __lock_acquire+0x7d10/0x7d10 [ 229.956123][ T5454] ? show_regs_print_info+0x12/0x12 [ 229.961382][ T5454] ? load_image+0x400/0x400 [ 229.965947][ T5454] ? __virt_addr_valid+0x465/0x540 [ 229.971129][ T5454] ? try_module_get+0x4f/0xf0 [ 229.975868][ T5454] print_report+0xa8/0x210 [ 229.980347][ T5454] kasan_report+0x10b/0x140 [ 229.984919][ T5454] ? try_module_get+0x4f/0xf0 [ 229.989741][ T5454] kasan_check_range+0x235/0x290 [ 229.994743][ T5454] try_module_get+0x4f/0xf0 [ 229.999370][ T5454] dvb_device_open+0xf1/0x370 [ 230.004108][ T5454] ? do_raw_spin_unlock+0x11d/0x230 [ 230.009354][ T5454] chrdev_open+0x5c5/0x6a0 [ 230.013832][ T5454] ? cd_forget+0x160/0x160 [ 230.018302][ T5454] ? fsnotify_perm+0x39b/0x550 [ 230.023125][ T5454] ? cd_forget+0x160/0x160 [ 230.027594][ T5454] do_dentry_open+0x7e9/0x10d0 [ 230.032420][ T5454] path_openat+0x2635/0x2ee0 [ 230.037074][ T5454] ? verify_lock_unused+0x140/0x140 [ 230.042770][ T5454] ? do_syscall_64+0x4c/0xa0 [ 230.047416][ T5454] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.053554][ T5454] ? do_filp_open+0x430/0x430 [ 230.058286][ T5454] do_filp_open+0x1f1/0x430 [ 230.062849][ T5454] ? vfs_tmpfile+0x480/0x480 [ 230.067499][ T5454] ? _raw_spin_unlock+0x24/0x40 [ 230.072402][ T5454] ? alloc_fd+0x58f/0x630 [ 230.076793][ T5454] do_sys_openat2+0x150/0x4b0 [ 230.081541][ T5454] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 230.087565][ T5454] ? do_sys_open+0xe0/0xe0 [ 230.092041][ T5454] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 230.098073][ T5454] ? lock_chain_count+0x20/0x20 [ 230.103078][ T5454] __x64_sys_openat+0x135/0x160 [ 230.107984][ T5454] do_syscall_64+0x4c/0xa0 [ 230.112454][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 230.117226][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 230.122253][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.128202][ T5454] RIP: 0033:0x7fe0c875d60e [ 230.132688][ T5454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.152359][ T5454] RSP: 002b:00007fe0c95a9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.160852][ T5454] RAX: ffffffffffffffda RBX: 00007fe0c95aa6c0 RCX: 00007fe0c875d60e [ 230.168968][ T5454] RDX: 0000000000000002 RSI: 00007fe0c95a9c00 RDI: ffffffffffffff9c [ 230.176989][ T5454] RBP: 00007fe0c95a9c00 R08: 0000000000000000 R09: 0000000000000000 [ 230.185009][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 230.193066][ T5454] R13: 00007fe0c8a16128 R14: 00007fe0c8a16090 R15: 00007ffccc508b78 [ 230.201098][ T5454] [ 230.204150][ T5454] [ 230.206513][ T5454] The buggy address belongs to the variable: [ 230.212515][ T5454] .str.2+0x30/0x40 [ 230.216363][ T5454] [ 230.218721][ T5454] The buggy address belongs to the physical page: [ 230.225195][ T5454] page:ffffea00002c0c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb031 [ 230.235316][ T5454] flags: 0xfff00000001000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 230.243275][ T5454] raw: 00fff00000001000 ffffea00002c0c48 ffffea00002c0c48 0000000000000000 [ 230.251913][ T5454] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 230.260544][ T5454] page dumped because: kasan: bad access detected [ 230.267010][ T5454] page_owner info is not present (never set?) [ 230.273112][ T5454] [ 230.275511][ T5454] Memory state around the buggy address: [ 230.281358][ T5454] ffffffff8b031b00: 00 06 f9 f9 00 00 02 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 230.289577][ T5454] ffffffff8b031b80: 00 00 00 00 03 f9 f9 f9 00 00 00 02 f9 f9 f9 f9 [ 230.297694][ T5454] >ffffffff8b031c00: 00 00 02 f9 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 230.305803][ T5454] ^ [ 230.311486][ T5454] ffffffff8b031c80: 00 00 00 02 f9 f9 f9 f9 00 00 00 04 f9 f9 f9 f9 [ 230.319591][ T5454] ffffffff8b031d00: 00 f9 f9 f9 00 00 00 00 00 05 f9 f9 f9 f9 f9 f9 [ 230.327688][ T5454] ================================================================== [ 230.339212][ T5454] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.346475][ T5454] CPU: 1 PID: 5454 Comm: syz.2.265 Not tainted syzkaller #0 [ 230.353799][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.363901][ T5454] Call Trace: [ 230.367217][ T5454] [ 230.370182][ T5454] dump_stack_lvl+0x188/0x24e [ 230.374916][ T5454] ? memcpy+0x3c/0x60 [ 230.378944][ T5454] ? show_regs_print_info+0x12/0x12 [ 230.384195][ T5454] ? load_image+0x400/0x400 [ 230.388743][ T5454] panic+0x2e5/0x730 [ 230.392684][ T5454] ? bpf_jit_dump+0xd0/0xd0 [ 230.397230][ T5454] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 230.403170][ T5454] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 230.409117][ T5454] ? _raw_spin_unlock+0x40/0x40 [ 230.414449][ T5454] ? print_memory_metadata+0x314/0x400 [ 230.419964][ T5454] check_panic_on_warn+0x80/0xa0 [ 230.424951][ T5454] ? try_module_get+0x4f/0xf0 [ 230.429753][ T5454] end_report+0x66/0x110 [ 230.434053][ T5454] kasan_report+0x118/0x140 [ 230.438614][ T5454] ? try_module_get+0x4f/0xf0 [ 230.443345][ T5454] kasan_check_range+0x235/0x290 [ 230.448343][ T5454] try_module_get+0x4f/0xf0 [ 230.452894][ T5454] dvb_device_open+0xf1/0x370 [ 230.457624][ T5454] ? do_raw_spin_unlock+0x11d/0x230 [ 230.462870][ T5454] chrdev_open+0x5c5/0x6a0 [ 230.467527][ T5454] ? cd_forget+0x160/0x160 [ 230.471991][ T5454] ? fsnotify_perm+0x39b/0x550 [ 230.476891][ T5454] ? cd_forget+0x160/0x160 [ 230.481360][ T5454] do_dentry_open+0x7e9/0x10d0 [ 230.486182][ T5454] path_openat+0x2635/0x2ee0 [ 230.490819][ T5454] ? verify_lock_unused+0x140/0x140 [ 230.496082][ T5454] ? do_syscall_64+0x4c/0xa0 [ 230.500729][ T5454] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.506875][ T5454] ? do_filp_open+0x430/0x430 [ 230.511615][ T5454] do_filp_open+0x1f1/0x430 [ 230.516185][ T5454] ? vfs_tmpfile+0x480/0x480 [ 230.520843][ T5454] ? _raw_spin_unlock+0x24/0x40 [ 230.525758][ T5454] ? alloc_fd+0x58f/0x630 [ 230.530150][ T5454] do_sys_openat2+0x150/0x4b0 [ 230.534895][ T5454] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 230.540933][ T5454] ? do_sys_open+0xe0/0xe0 [ 230.545494][ T5454] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 230.551536][ T5454] ? lock_chain_count+0x20/0x20 [ 230.556438][ T5454] __x64_sys_openat+0x135/0x160 [ 230.561347][ T5454] do_syscall_64+0x4c/0xa0 [ 230.565823][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 230.570555][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 230.575630][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.581583][ T5454] RIP: 0033:0x7fe0c875d60e [ 230.586041][ T5454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.605697][ T5454] RSP: 002b:00007fe0c95a9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.614178][ T5454] RAX: ffffffffffffffda RBX: 00007fe0c95aa6c0 RCX: 00007fe0c875d60e [ 230.622510][ T5454] RDX: 0000000000000002 RSI: 00007fe0c95a9c00 RDI: ffffffffffffff9c [ 230.630532][ T5454] RBP: 00007fe0c95a9c00 R08: 0000000000000000 R09: 0000000000000000 [ 230.638729][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 230.646740][ T5454] R13: 00007fe0c8a16128 R14: 00007fe0c8a16090 R15: 00007ffccc508b78 [ 230.654767][ T5454] [ 230.657958][ T5454] Kernel Offset: disabled [ 230.662308][ T5454] Rebooting in 86400 seconds..