last executing test programs: 1.468471683s ago: executing program 3 (id=4): msgget$private(0x0, 0x1f3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x1b8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x180, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb351}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x741c56b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb221ea7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x470}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x811f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x912}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x228}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x4, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x5, 0x8}) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 1.354767627s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000a40)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x200040c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x5, 0x8, 0x2, 0x40, 0x40}, 0x2a, &(0x7f0000000540)={0x5, 0xf, 0x2a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xff, 0x25, 0x8, 0x80}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0xa2, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x5}, @generic={0x3, 0x10, 0x3}]}, 0x3, [{0x2, &(0x7f0000000640)=@string={0x2}}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x5b, &(0x7f0000000800)=@string={0x5b, 0x3, "b7bec5fd70f11421892464b2402788235d2427a7c632249283f286d3bc8faa05e62a5e9d9aaa07dd238d18255a190742271bcd83adc24f9ea1932c4d51f9b029321e6640ed7ce904ac0e3383b48a98fe90a9074336b8faef1a"}}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.085132783s ago: executing program 2 (id=3): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000) preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1) 1.042521562s ago: executing program 0 (id=1): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 1.000871761s ago: executing program 1 (id=2): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c", 0xd}, {&(0x7f0000000280)}], 0x2}, 0x48050) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 680.955788ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 226.072482ms ago: executing program 2 (id=7): pipe(&(0x7f0000000600)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) 164.876055ms ago: executing program 0 (id=8): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x5, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) 0s ago: executing program 0 (id=9): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000080)) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x30000000}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 47.033395][ T4173] cgroup: Unknown subsys name 'net' [ 47.134089][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.297760][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.763084][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 49.832532][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 49.892079][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 49.902312][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 49.931780][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.939004][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.947987][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.961239][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.968413][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.976216][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.035629][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.049570][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.068310][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.075372][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.083570][ T4197] device bridge_slave_0 entered promiscuous mode [ 50.094262][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.101627][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.109852][ T4197] device bridge_slave_1 entered promiscuous mode [ 50.121299][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.152285][ T4186] team0: Port device team_slave_0 added [ 50.159892][ T4186] team0: Port device team_slave_1 added [ 50.220753][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.229967][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237651][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.245325][ T4193] device bridge_slave_0 entered promiscuous mode [ 50.258207][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.265263][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.273078][ T4193] device bridge_slave_1 entered promiscuous mode [ 50.284533][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.292118][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.299899][ T4187] device bridge_slave_0 entered promiscuous mode [ 50.308874][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.318721][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.325666][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.352379][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.370239][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.377391][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.385006][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.392900][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.400083][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.407965][ T4187] device bridge_slave_1 entered promiscuous mode [ 50.426648][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.433610][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.460168][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.481117][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.488435][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.496121][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.523432][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.534346][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.545131][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.556548][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.573873][ T4197] team0: Port device team_slave_0 added [ 50.596987][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.607650][ T4197] team0: Port device team_slave_1 added [ 50.614621][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.638489][ T4186] device hsr_slave_0 entered promiscuous mode [ 50.645182][ T4186] device hsr_slave_1 entered promiscuous mode [ 50.675616][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.682803][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.708834][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.723027][ T4187] team0: Port device team_slave_0 added [ 50.737130][ T4193] team0: Port device team_slave_0 added [ 50.749379][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.756349][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.783354][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.795333][ T4187] team0: Port device team_slave_1 added [ 50.813610][ T4193] team0: Port device team_slave_1 added [ 50.821171][ T4188] team0: Port device team_slave_0 added [ 50.847853][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.854819][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.881067][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.898622][ T4188] team0: Port device team_slave_1 added [ 50.911381][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.918542][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.944624][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.960549][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.967580][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.993483][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.015394][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.022719][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.048868][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.076395][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.083501][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.110148][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.151395][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.158772][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.184819][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.203672][ T4197] device hsr_slave_0 entered promiscuous mode [ 51.210273][ T4197] device hsr_slave_1 entered promiscuous mode [ 51.216814][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.224597][ T4197] Cannot create hsr debugfs directory [ 51.281941][ T4193] device hsr_slave_0 entered promiscuous mode [ 51.288735][ T4193] device hsr_slave_1 entered promiscuous mode [ 51.295515][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.303304][ T4193] Cannot create hsr debugfs directory [ 51.317286][ T4187] device hsr_slave_0 entered promiscuous mode [ 51.323844][ T4187] device hsr_slave_1 entered promiscuous mode [ 51.330385][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.338134][ T4187] Cannot create hsr debugfs directory [ 51.359845][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.366454][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.373652][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.381425][ T4188] Cannot create hsr debugfs directory [ 51.509675][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.522450][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.550954][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.557512][ T2317] Bluetooth: hci2: command 0x0409 tx timeout [ 51.557954][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 51.569601][ T2317] Bluetooth: hci1: command 0x0409 tx timeout [ 51.570135][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 51.581671][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 51.614280][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.717792][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.728499][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.742374][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.753491][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.794006][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.812518][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.826454][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.835563][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.883632][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.917853][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.933049][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.942510][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.973119][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.018805][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.031911][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.043449][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.052211][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.063797][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.079787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.088332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.096427][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.107796][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.118567][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.128637][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.138115][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.147223][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.154552][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.163988][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.184725][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.192751][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.201866][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.210799][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.217900][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.226856][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.235370][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.244630][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.251730][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.259865][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.271870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.284496][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.313223][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.323203][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.331920][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.339030][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.348183][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.357496][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.365909][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.375517][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.384192][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.393009][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.401985][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.410765][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.419694][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.428653][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.436554][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.452509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.461250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.470710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.480498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.493796][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.509969][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.521480][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.534418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.543731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.552071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.561330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.571178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.583359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.603955][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.615340][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.637852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.647912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.685171][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.692310][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.706116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.715849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.724543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.734190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.742627][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.749704][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.758306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.769578][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.776380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.807673][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.831129][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.853361][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.871035][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.880186][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.888078][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.896792][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.905173][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.912994][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.928125][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.960816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.971388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.980697][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.987893][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.995670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.004983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.013332][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.020380][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.028263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.036894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.045769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.054261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.062681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.071269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.080335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.104783][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.115683][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.129141][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.139884][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.149410][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.157590][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.165062][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.174498][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.188840][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.197605][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.205780][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.214402][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.222772][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.235294][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.248709][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.264175][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.272832][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.282559][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.292523][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.306367][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.321976][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.334012][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.343114][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.366666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.375331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.391349][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.398505][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.432849][ T4197] device veth0_vlan entered promiscuous mode [ 53.442915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.452642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.462207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.473162][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.480290][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.489106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.503109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.512185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.523653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.532409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.541740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.550610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.559362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.568430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.586832][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.597980][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.615559][ T4197] device veth1_vlan entered promiscuous mode [ 53.625152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.634807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.636942][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 53.658035][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 53.660193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.671720][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 53.681128][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 53.690081][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 53.700576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.717574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.728367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.736995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.745242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.754265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.763890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.800731][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.811440][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.826469][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.835300][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.844411][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.857913][ T4186] device veth0_vlan entered promiscuous mode [ 53.869214][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.879412][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.888329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.901931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.917287][ T4186] device veth1_vlan entered promiscuous mode [ 53.948920][ T4197] device veth0_macvtap entered promiscuous mode [ 53.957325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.965007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.974136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.982274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.991194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.999955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.008580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.047050][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.055752][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.064963][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.073675][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.088266][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.096910][ T4197] device veth1_macvtap entered promiscuous mode [ 54.111269][ T4193] device veth0_vlan entered promiscuous mode [ 54.120407][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.130063][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.138935][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.149730][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.158317][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.167296][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.175926][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.184012][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.200586][ T4186] device veth0_macvtap entered promiscuous mode [ 54.222427][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.232020][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.240583][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.252985][ T4186] device veth1_macvtap entered promiscuous mode [ 54.262651][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.275753][ T4193] device veth1_vlan entered promiscuous mode [ 54.286466][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.294815][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.303850][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.312031][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.320829][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.329719][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.349717][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.358431][ T4188] device veth0_vlan entered promiscuous mode [ 54.378278][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.389365][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.401748][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.411055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.420256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.428991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.438571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.448161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.456865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.465298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.501888][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.510894][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.522097][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.531130][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.542054][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.553237][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.564361][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.581660][ T4187] device veth0_vlan entered promiscuous mode [ 54.591228][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.600755][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.609826][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.620424][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.629129][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.639622][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.649760][ T4193] device veth0_macvtap entered promiscuous mode [ 54.659052][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.668078][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.677224][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.685949][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.701566][ T4188] device veth1_vlan entered promiscuous mode [ 54.710554][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.719205][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.728298][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.735974][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.747954][ T4193] device veth1_macvtap entered promiscuous mode [ 54.786255][ T4187] device veth1_vlan entered promiscuous mode [ 54.834646][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.846250][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.857003][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.867713][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.879008][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.886385][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.894804][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.902863][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.911671][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.920785][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.932890][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.941648][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.951043][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.962172][ T4188] device veth0_macvtap entered promiscuous mode [ 54.976276][ T4188] device veth1_macvtap entered promiscuous mode [ 54.986231][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.997621][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.015696][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.028967][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.041217][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.051675][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.062428][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.085628][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.094789][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.111973][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.121051][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.130018][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.138981][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.161271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.170306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.184345][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.195054][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.205288][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.216023][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.226347][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.237856][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.249390][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.260048][ T4187] device veth0_macvtap entered promiscuous mode [ 55.269173][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.277429][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.292442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.300718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.310994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.320714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.330425][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.341097][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.351106][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.361859][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.372042][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.383490][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.394658][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.406464][ T4187] device veth1_macvtap entered promiscuous mode [ 55.425864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.433987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.443495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.454688][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.463642][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.472662][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.484036][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.537630][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.548135][ T1542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.555967][ T1542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.557786][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.579735][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.590793][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.600711][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.611199][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.621169][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.631628][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.642933][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.659819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.667356][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.673196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.675162][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.683918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.712185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.724857][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.736004][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 55.740085][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.746302][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 55.752914][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.763566][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 55.769385][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.774785][ T26] Bluetooth: hci3: command 0x040f tx timeout [ 55.784301][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.784315][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.784323][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.784333][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.785631][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.798290][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 55.824873][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.856205][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.872407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.884752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.894148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.912732][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.927768][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.937072][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.945793][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.988569][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.000817][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.028263][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.039795][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.096271][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.107852][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.125102][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.142485][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.202161][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.207520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.221850][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.230979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.251582][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.264643][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.276095][ T4265] ODEBUG: Out of memory. ODEBUG disabled [ 56.278652][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.329068][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.345440][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.354090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.487148][ T4226] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 56.836667][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.857025][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.888330][ T4279] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 57.026837][ T4226] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 57.037197][ T4226] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 57.048049][ T4226] usb 4-1: Product: syz [ 57.052256][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2ff000: rx timeout, send abort [ 57.065200][ T4226] usb 4-1: Manufacturer: syz [ 57.070207][ T4226] usb 4-1: SerialNumber: syz [ 57.082782][ T4226] usb 4-1: config 0 descriptor?? [ 57.089319][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 57.130391][ T4226] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 57.139251][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 57.147832][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 57.158301][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 57.170920][ T4226] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 57.182141][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 57.191510][ T4226] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 57.200837][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 57.208761][ T4261] usb 5-1: config 0 has no interfaces? [ 57.214315][ T4261] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.224643][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.232907][ T4226] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 57.250259][ T4226] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 57.268310][ T4261] usb 5-1: config 0 descriptor?? [ 57.280218][ T4226] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 57.504162][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.549564][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2ffc00: rx timeout, send abort [ 57.561970][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2ff000: abort rx timeout. Force session deactivation [ 57.565834][ T3519] usb 5-1: USB disconnect, device number 2 [ 57.618141][ T4289] futex_wake_op: syz.0.9 tries to shift op by 144; fix this program [ 57.638933][ T4289] futex_wake_op: syz.0.9 tries to shift op by 144; fix this program [ 57.651165][ T4231] usb 4-1: USB disconnect, device number 2 [ 57.663696][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 57.673497][ C0] ================================================================== [ 57.673567][ C0] BUG: KASAN: use-after-free in usa49_glocont_callback+0x19f/0x270 [ 57.673611][ C0] Read of size 4 at addr ffff888079fa89b0 by task kworker/0:7/4231 [ 57.673630][ C0] [ 57.673641][ C0] CPU: 0 PID: 4231 Comm: kworker/0:7 Not tainted syzkaller #0 [ 57.673663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.673678][ C0] Workqueue: usb_hub_wq hub_event [ 57.673709][ C0] Call Trace: [ 57.673718][ C0] [ 57.673727][ C0] dump_stack_lvl+0x188/0x250 [ 57.673753][ C0] ? show_regs_print_info+0x20/0x20 [ 57.673773][ C0] ? _printk+0xda/0x130 [ 57.673791][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.673816][ C0] ? load_image+0x410/0x410 [ 57.673842][ C0] print_address_description+0x60/0x2d0 [ 57.673866][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.673885][ C0] kasan_report+0xdf/0x130 [ 57.673910][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.673928][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 57.673954][ C0] usa49_glocont_callback+0x19f/0x270 [ 57.673979][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 57.674006][ C0] dummy_timer+0xa47/0x34a0 [ 57.674032][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 57.674057][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 57.674095][ C0] ? mark_lock+0x94/0x320 [ 57.674116][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.674159][ C0] ? dummy_free_streams+0x520/0x520 [ 57.674190][ C0] ? dummy_free_streams+0x520/0x520 [ 57.674224][ C0] call_timer_fn+0x17b/0x540 [ 57.674249][ C0] ? dummy_free_streams+0x520/0x520 [ 57.674274][ C0] ? __run_timers+0x810/0x810 [ 57.674305][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.674326][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 57.674348][ C0] ? dummy_free_streams+0x520/0x520 [ 57.674374][ C0] __run_timers+0x56c/0x810 [ 57.674410][ C0] ? detach_timer+0x2b0/0x2b0 [ 57.674431][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.674456][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 57.674477][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 57.674501][ C0] run_timer_softirq+0x63/0xf0 [ 57.674524][ C0] handle_softirqs+0x336/0x830 [ 57.674549][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 57.674573][ C0] ? do_softirq+0x210/0x210 [ 57.674592][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 57.674618][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 57.674642][ C0] __irq_exit_rcu+0x13b/0x230 [ 57.674661][ C0] ? irq_exit_rcu+0x20/0x20 [ 57.674691][ C0] irq_exit_rcu+0x5/0x20 [ 57.674708][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 57.674730][ C0] [ 57.674737][ C0] [ 57.674745][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 57.674775][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 57.674798][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 57.674816][ C0] RSP: 0018:ffffc9000314ede0 EFLAGS: 00000246 [ 57.674836][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 57.674851][ C0] RDX: ffffc90013a29000 RSI: 0000000000010ac4 RDI: 0000000000000000 [ 57.674865][ C0] RBP: ffffc9000314f050 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 57.674882][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 57.674897][ C0] R13: 0000000000000069 R14: 0000000000000000 R15: dffffc0000000000 [ 57.674918][ C0] ? console_unlock+0xc8d/0x10f0 [ 57.674944][ C0] ? read_lock_is_recursive+0x10/0x10 [ 57.674974][ C0] ? console_trylock_spinning+0x370/0x370 [ 57.674994][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 57.675018][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 57.675037][ C0] ? vprintk_emit+0xa7/0x150 [ 57.675056][ C0] ? printk_parse_prefix+0x310/0x310 [ 57.675074][ C0] ? vprintk_emit+0xa7/0x150 [ 57.675092][ C0] ? console_trylock+0x70/0x70 [ 57.675113][ C0] ? vsnprintf+0x1b22/0x1c20 [ 57.675145][ C0] ? vprintk_emit+0x150/0x150 [ 57.675163][ C0] ? snprintf+0xe5/0x140 [ 57.675189][ C0] ? vscnprintf+0x80/0x80 [ 57.675218][ C0] ? kfree+0xef/0x2a0 [ 57.675239][ C0] ? stack_trace_save+0xa6/0xf0 [ 57.675263][ C0] vprintk_emit+0xc0/0x150 [ 57.675286][ C0] dev_vprintk_emit+0x2c2/0x360 [ 57.675312][ C0] ? _dev_info+0x170/0x170 [ 57.675332][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 57.675358][ C0] ? bus_remove_device+0x2dd/0x400 [ 57.675379][ C0] ? device_del+0x63f/0xa80 [ 57.675396][ C0] ? usb_disable_device+0x3e7/0x8a0 [ 57.675420][ C0] ? usb_disconnect+0x33c/0x8a0 [ 57.675440][ C0] ? process_one_work+0x867/0xff0 [ 57.675466][ C0] dev_printk_emit+0xeb/0x140 [ 57.675494][ C0] ? dev_vprintk_emit+0x360/0x360 [ 57.675516][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.675546][ C0] ? __dev_printk+0x131/0x190 [ 57.675567][ C0] _dev_info+0x11b/0x170 [ 57.675586][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 57.675612][ C0] ? parport_read+0x20/0x20 [ 57.675634][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 57.675655][ C0] ? keyspan_port_probe+0xd10/0xd10 [ 57.675678][ C0] ? usb_serial_device_remove+0x11c/0x1e0 [ 57.675701][ C0] ? kfree+0xef/0x2a0 [ 57.675719][ C0] ? keyspan_port_remove+0x2c5/0x2e0 [ 57.675743][ C0] ? keyspan_port_probe+0xd10/0xd10 [ 57.675768][ C0] usb_serial_device_remove+0x149/0x1e0 [ 57.675793][ C0] ? usb_serial_device_probe+0x2d0/0x2d0 [ 57.675815][ C0] device_release_driver_internal+0x44c/0x710 [ 57.675846][ C0] bus_remove_device+0x2dd/0x400 [ 57.675872][ C0] device_del+0x63f/0xa80 [ 57.675899][ C0] ? kill_device+0x160/0x160 [ 57.675918][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 57.675941][ C0] ? _raw_spin_unlock+0x40/0x40 [ 57.675967][ C0] usb_serial_disconnect+0x294/0x480 [ 57.675993][ C0] usb_unbind_interface+0x203/0x870 [ 57.676015][ C0] ? up_write+0x1b6/0x410 [ 57.676043][ C0] ? usb_driver_release_interface+0x1c0/0x1c0 [ 57.676063][ C0] device_release_driver_internal+0x487/0x710 [ 57.676092][ C0] bus_remove_device+0x2dd/0x400 [ 57.676118][ C0] device_del+0x63f/0xa80 [ 57.676145][ C0] ? kill_device+0x160/0x160 [ 57.676166][ C0] ? lock_chain_count+0x20/0x20 [ 57.676189][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 57.676217][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 57.676243][ C0] usb_disable_device+0x3e7/0x8a0 [ 57.676276][ C0] usb_disconnect+0x33c/0x8a0 [ 57.676305][ C0] hub_event+0x1d64/0x5260 [ 57.676367][ C0] ? hub_post_resume+0x120/0x120 [ 57.676390][ C0] ? read_lock_is_recursive+0x10/0x10 [ 57.676415][ C0] ? __schedule+0x11cb/0x4350 [ 57.676440][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.676466][ C0] process_one_work+0x867/0xff0 [ 57.676500][ C0] ? worker_detach_from_pool+0x240/0x240 [ 57.676521][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 57.676547][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 57.676568][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 57.676589][ C0] ? wq_worker_running+0x97/0x170 [ 57.676609][ C0] worker_thread+0xad7/0x12a0 [ 57.676650][ C0] kthread+0x42e/0x520 [ 57.676668][ C0] ? rcu_lock_release+0x20/0x20 [ 57.676688][ C0] ? kthread_blkcg+0xd0/0xd0 [ 57.676708][ C0] ret_from_fork+0x1f/0x30 [ 57.676740][ C0] [ 57.676747][ C0] [ 57.676752][ C0] Allocated by task 4226: [ 57.676763][ C0] __kasan_kmalloc+0xaf/0xe0 [ 57.676784][ C0] keyspan_port_probe+0xa7/0xd10 [ 57.676805][ C0] usb_serial_device_probe+0xd6/0x2d0 [ 57.676822][ C0] really_probe+0x276/0xc70 [ 57.676843][ C0] __driver_probe_device+0x1f5/0x390 [ 57.676866][ C0] driver_probe_device+0x4f/0x420 [ 57.676888][ C0] __device_attach_driver+0x2b0/0x500 [ 57.676910][ C0] bus_for_each_drv+0x184/0x210 [ 57.676930][ C0] __device_attach+0x2a7/0x480 [ 57.676950][ C0] bus_probe_device+0xba/0x1d0 [ 57.676969][ C0] device_add+0xbcf/0x1050 [ 57.676985][ C0] usb_serial_probe+0x265c/0x2c90 [ 57.677004][ C0] usb_probe_interface+0x5be/0xae0 [ 57.677022][ C0] really_probe+0x276/0xc70 [ 57.677042][ C0] __driver_probe_device+0x1f5/0x390 [ 57.677063][ C0] driver_probe_device+0x4f/0x420 [ 57.677084][ C0] __device_attach_driver+0x2b0/0x500 [ 57.677105][ C0] bus_for_each_drv+0x184/0x210 [ 57.677124][ C0] __device_attach+0x2a7/0x480 [ 57.677144][ C0] bus_probe_device+0xba/0x1d0 [ 57.677163][ C0] device_add+0xbcf/0x1050 [ 57.677180][ C0] usb_set_configuration+0x19d5/0x2030 [ 57.677202][ C0] usb_generic_driver_probe+0x89/0x150 [ 57.677238][ C0] usb_probe_device+0x126/0x250 [ 57.677255][ C0] really_probe+0x276/0xc70 [ 57.677276][ C0] __driver_probe_device+0x1f5/0x390 [ 57.677297][ C0] driver_probe_device+0x4f/0x420 [ 57.677318][ C0] __device_attach_driver+0x2b0/0x500 [ 57.677340][ C0] bus_for_each_drv+0x184/0x210 [ 57.677359][ C0] __device_attach+0x2a7/0x480 [ 57.677380][ C0] bus_probe_device+0xba/0x1d0 [ 57.677399][ C0] device_add+0xbcf/0x1050 [ 57.677416][ C0] usb_new_device+0x9f6/0x15d0 [ 57.677433][ C0] hub_event+0x2b8d/0x5260 [ 57.677451][ C0] process_one_work+0x867/0xff0 [ 57.677471][ C0] worker_thread+0xad7/0x12a0 [ 57.677490][ C0] kthread+0x42e/0x520 [ 57.677506][ C0] ret_from_fork+0x1f/0x30 [ 57.677525][ C0] [ 57.677530][ C0] Freed by task 4231: [ 57.677539][ C0] kasan_set_track+0x4b/0x70 [ 57.677559][ C0] kasan_set_free_info+0x1f/0x40 [ 57.677580][ C0] ____kasan_slab_free+0xd5/0x110 [ 57.677600][ C0] slab_free_freelist_hook+0xec/0x170 [ 57.677620][ C0] kfree+0xef/0x2a0 [ 57.677636][ C0] usb_serial_device_remove+0x11c/0x1e0 [ 57.677657][ C0] device_release_driver_internal+0x44c/0x710 [ 57.677679][ C0] bus_remove_device+0x2dd/0x400 [ 57.677698][ C0] device_del+0x63f/0xa80 [ 57.677714][ C0] usb_serial_disconnect+0x294/0x480 [ 57.677734][ C0] usb_unbind_interface+0x203/0x870 [ 57.677751][ C0] device_release_driver_internal+0x487/0x710 [ 57.677773][ C0] bus_remove_device+0x2dd/0x400 [ 57.677793][ C0] device_del+0x63f/0xa80 [ 57.677810][ C0] usb_disable_device+0x3e7/0x8a0 [ 57.677829][ C0] usb_disconnect+0x33c/0x8a0 [ 57.677846][ C0] hub_event+0x1d64/0x5260 [ 57.677864][ C0] process_one_work+0x867/0xff0 [ 57.677883][ C0] worker_thread+0xad7/0x12a0 [ 57.677902][ C0] kthread+0x42e/0x520 [ 57.677918][ C0] ret_from_fork+0x1f/0x30 [ 57.677937][ C0] [ 57.677942][ C0] The buggy address belongs to the object at ffff888079fa8900 [ 57.677942][ C0] which belongs to the cache kmalloc-192 of size 192 [ 57.677959][ C0] The buggy address is located 176 bytes inside of [ 57.677959][ C0] 192-byte region [ffff888079fa8900, ffff888079fa89c0) [ 57.677979][ C0] The buggy address belongs to the page: [ 57.677998][ C0] page:ffffea0001e7ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79fa8 [ 57.678022][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 57.678057][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41a00 [ 57.678076][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 57.678087][ C0] page dumped because: kasan: bad access detected [ 57.678101][ C0] page_owner tracks the page as allocated [ 57.678108][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4265, ts 57013793688, free_ts 56997158322 [ 57.678139][ C0] get_page_from_freelist+0x24f6/0x2670 [ 57.678162][ C0] __alloc_pages+0x1ee/0x480 [ 57.678182][ C0] new_slab+0xc0/0x4b0 [ 57.678200][ C0] ___slab_alloc+0x807/0xdd0 [ 57.678223][ C0] __kmalloc+0x11d/0x340 [ 57.678240][ C0] hash_netport6_add+0x13fb/0x3470 [ 57.678262][ C0] hash_netport6_uadt+0x9f6/0xcf0 [ 57.678282][ C0] call_ad+0x387/0x9a0 [ 57.678299][ C0] ip_set_ad+0x816/0x9c0 [ 57.678316][ C0] nfnetlink_rcv_msg+0xbf7/0x1180 [ 57.678337][ C0] netlink_rcv_skb+0x1e9/0x430 [ 57.678359][ C0] nfnetlink_rcv+0x2b4/0x2450 [ 57.678378][ C0] netlink_unicast+0x78f/0x940 [ 57.678398][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 57.678415][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 57.678435][ C0] ___sys_sendmsg+0x236/0x2e0 [ 57.678455][ C0] page last free stack trace: [ 57.678461][ C0] free_unref_page_prepare+0x637/0x6c0 [ 57.678482][ C0] free_unref_page+0x8f/0x2a0 [ 57.678502][ C0] qlist_free_all+0x35/0x90 [ 57.678518][ C0] kasan_quarantine_reduce+0x150/0x160 [ 57.678536][ C0] __kasan_slab_alloc+0x2f/0xc0 [ 57.678556][ C0] slab_post_alloc_hook+0x4c/0x380 [ 57.678574][ C0] kmem_cache_alloc_trace+0x165/0x290 [ 57.678592][ C0] nsim_fib_event_work+0x1171/0x3380 [ 57.678612][ C0] process_one_work+0x867/0xff0 [ 57.678631][ C0] worker_thread+0xd93/0x12a0 [ 57.678650][ C0] kthread+0x42e/0x520 [ 57.678667][ C0] ret_from_fork+0x1f/0x30 [ 57.678686][ C0] [ 57.678691][ C0] Memory state around the buggy address: [ 57.678701][ C0] ffff888079fa8880: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 57.678714][ C0] ffff888079fa8900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.678727][ C0] >ffff888079fa8980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 57.678738][ C0] ^ [ 57.678749][ C0] ffff888079fa8a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.678763][ C0] ffff888079fa8a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 57.678773][ C0] ================================================================== [ 57.678781][ C0] Disabling lock debugging due to kernel taint [ 57.678797][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.678807][ C0] CPU: 0 PID: 4231 Comm: kworker/0:7 Tainted: G B syzkaller #0 [ 57.678823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.678834][ C0] Workqueue: usb_hub_wq hub_event [ 57.678854][ C0] Call Trace: [ 57.678862][ C0] [ 57.678868][ C0] dump_stack_lvl+0x188/0x250 [ 57.678889][ C0] ? show_regs_print_info+0x20/0x20 [ 57.678907][ C0] ? load_image+0x410/0x410 [ 57.678929][ C0] panic+0x2f8/0x850 [ 57.678951][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 57.678973][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 57.678994][ C0] ? _raw_spin_unlock+0x40/0x40 [ 57.679012][ C0] ? print_memory_metadata+0x314/0x400 [ 57.679032][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.679050][ C0] check_panic_on_warn+0x80/0xa0 [ 57.679070][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.679089][ C0] end_report+0x6d/0xf0 [ 57.679109][ C0] kasan_report+0x102/0x130 [ 57.679129][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 57.679147][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 57.679168][ C0] usa49_glocont_callback+0x19f/0x270 [ 57.679189][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 57.679221][ C0] dummy_timer+0xa47/0x34a0 [ 57.679246][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 57.679270][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 57.679296][ C0] ? mark_lock+0x94/0x320 [ 57.679314][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.679345][ C0] ? dummy_free_streams+0x520/0x520 [ 57.679369][ C0] ? dummy_free_streams+0x520/0x520 [ 57.679390][ C0] call_timer_fn+0x17b/0x540 [ 57.679410][ C0] ? dummy_free_streams+0x520/0x520 [ 57.679432][ C0] ? __run_timers+0x810/0x810 [ 57.679455][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.679474][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 57.679494][ C0] ? dummy_free_streams+0x520/0x520 [ 57.679517][ C0] __run_timers+0x56c/0x810 [ 57.679543][ C0] ? detach_timer+0x2b0/0x2b0 [ 57.679562][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.679586][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 57.679606][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 57.679627][ C0] run_timer_softirq+0x63/0xf0 [ 57.679648][ C0] handle_softirqs+0x336/0x830 [ 57.679668][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 57.679688][ C0] ? do_softirq+0x210/0x210 [ 57.679704][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 57.679725][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 57.679746][ C0] __irq_exit_rcu+0x13b/0x230 [ 57.679764][ C0] ? irq_exit_rcu+0x20/0x20 [ 57.679785][ C0] irq_exit_rcu+0x5/0x20 [ 57.679801][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 57.679823][ C0] [ 57.679829][ C0] [ 57.679835][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 57.679861][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 57.679882][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 57.679897][ C0] RSP: 0018:ffffc9000314ede0 EFLAGS: 00000246 [ 57.679913][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 57.679926][ C0] RDX: ffffc90013a29000 RSI: 0000000000010ac4 RDI: 0000000000000000 [ 57.679940][ C0] RBP: ffffc9000314f050 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 57.679955][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 57.679969][ C0] R13: 0000000000000069 R14: 0000000000000000 R15: dffffc0000000000 [ 57.679986][ C0] ? console_unlock+0xc8d/0x10f0 [ 57.680007][ C0] ? read_lock_is_recursive+0x10/0x10 [ 57.680032][ C0] ? console_trylock_spinning+0x370/0x370 [ 57.680051][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 57.680071][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 57.680089][ C0] ? vprintk_emit+0xa7/0x150 [ 57.680106][ C0] ? printk_parse_prefix+0x310/0x310 [ 57.680124][ C0] ? vprintk_emit+0xa7/0x150 [ 57.680141][ C0] ? console_trylock+0x70/0x70 [ 57.680160][ C0] ? vsnprintf+0x1b22/0x1c20 [ 57.680184][ C0] ? vprintk_emit+0x150/0x150 [ 57.680200][ C0] ? snprintf+0xe5/0x140 [ 57.680231][ C0] ? vscnprintf+0x80/0x80 [ 57.680250][ C0] ? kfree+0xef/0x2a0 [ 57.680268][ C0] ? stack_trace_save+0xa6/0xf0 [ 57.680287][ C0] vprintk_emit+0xc0/0x150 [ 57.680306][ C0] dev_vprintk_emit+0x2c2/0x360 [ 57.680328][ C0] ? _dev_info+0x170/0x170 [ 57.680345][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 57.680367][ C0] ? bus_remove_device+0x2dd/0x400 [ 57.680387][ C0] ? device_del+0x63f/0xa80 [ 57.680404][ C0] ? usb_disable_device+0x3e7/0x8a0 [ 57.680425][ C0] ? usb_disconnect+0x33c/0x8a0 [ 57.680443][ C0] ? process_one_work+0x867/0xff0 [ 57.680466][ C0] dev_printk_emit+0xeb/0x140 [ 57.680488][ C0] ? dev_vprintk_emit+0x360/0x360 [ 57.680508][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.680532][ C0] ? __dev_printk+0x131/0x190 [ 57.680553][ C0] _dev_info+0x11b/0x170 [ 57.680572][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 57.680593][ C0] ? parport_read+0x20/0x20 [ 57.680612][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 57.680633][ C0] ? keyspan_port_probe+0xd10/0xd10 [ 57.680655][ C0] ? usb_serial_device_remove+0x11c/0x1e0 [ 57.680675][ C0] ? kfree+0xef/0x2a0 [ 57.680690][ C0] ? keyspan_port_remove+0x2c5/0x2e0 [ 57.680710][ C0] ? keyspan_port_probe+0xd10/0xd10 [ 57.680731][ C0] usb_serial_device_remove+0x149/0x1e0 [ 57.680752][ C0] ? usb_serial_device_probe+0x2d0/0x2d0 [ 57.680769][ C0] device_release_driver_internal+0x44c/0x710 [ 57.680790][ C0] bus_remove_device+0x2dd/0x400 [ 57.680808][ C0] device_del+0x63f/0xa80 [ 57.680824][ C0] ? kill_device+0x160/0x160 [ 57.680840][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 57.680857][ C0] ? _raw_spin_unlock+0x40/0x40 [ 57.680877][ C0] usb_serial_disconnect+0x294/0x480 [ 57.680895][ C0] usb_unbind_interface+0x203/0x870 [ 57.680911][ C0] ? up_write+0x1b6/0x410 [ 57.680932][ C0] ? usb_driver_release_interface+0x1c0/0x1c0 [ 57.680950][ C0] device_release_driver_internal+0x487/0x710 [ 57.680973][ C0] bus_remove_device+0x2dd/0x400 [ 57.680993][ C0] device_del+0x63f/0xa80 [ 57.681012][ C0] ? kill_device+0x160/0x160 [ 57.681028][ C0] ? lock_chain_count+0x20/0x20 [ 57.681047][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 57.681064][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 57.681080][ C0] usb_disable_device+0x3e7/0x8a0 [ 57.681107][ C0] usb_disconnect+0x33c/0x8a0 [ 57.681130][ C0] hub_event+0x1d64/0x5260 [ 57.681166][ C0] ? hub_post_resume+0x120/0x120 [ 57.681186][ C0] ? read_lock_is_recursive+0x10/0x10 [ 57.681220][ C0] ? __schedule+0x11cb/0x4350 [ 57.681244][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.681266][ C0] process_one_work+0x867/0xff0 [ 57.681293][ C0] ? worker_detach_from_pool+0x240/0x240 [ 57.681314][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 57.681338][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 57.681358][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 57.681380][ C0] ? wq_worker_running+0x97/0x170 [ 57.681400][ C0] worker_thread+0xad7/0x12a0 [ 57.681432][ C0] kthread+0x42e/0x520 [ 57.681449][ C0] ? rcu_lock_release+0x20/0x20 [ 57.681469][ C0] ? kthread_blkcg+0xd0/0xd0 [ 57.681489][ C0] ret_from_fork+0x1f/0x30 [ 57.681515][ C0] [ 57.681755][ C0] Kernel Offset: disabled [ 59.710404][ C0] Rebooting in 86400 seconds..