last executing test programs: 12.274047809s ago: executing program 1 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 11.451518889s ago: executing program 0 (id=108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) fchown(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) bind$can_raw(r6, 0x0, 0x0) sendmsg$xdp(r6, 0x0, 0x0) sendmsg$alg(r6, 0x0, 0x0) socket(0xa, 0x5, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) migrate_pages(0x0, 0x200, 0x0, 0x0) 10.397505265s ago: executing program 0 (id=110): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sndctrl(0x0, 0x0, 0x80) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f00000004c0)={'wlan1\x00', @random="020000000100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0xb65d1703e87bef89, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 9.080313956s ago: executing program 1 (id=115): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r3, &(0x7f00000002c0)=""/201, 0xc9) 8.96904424s ago: executing program 1 (id=117): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 7.588203919s ago: executing program 1 (id=121): socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="58010000100003040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x10}, 0x2000a080) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)={&(0x7f00000004c0), 0x1033, 0x0, 0xf4}, &(0x7f0000000500)={&(0x7f0000000540), 0x1000, 0x1}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 6.081654825s ago: executing program 0 (id=126): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0xfff, 0x0, 0x0, 0x800, 0x7}, {0x4, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020a000102"], 0x6c}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x8001, 0x8, 0x9, 0x3ba}, {0x7fff, 0x2, 0xff, 0x5}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$inet(r4, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYBLOB="00000000000000000800040004060000"], 0x30}}, 0x0) ftruncate(r6, 0x2000009) sendfile(r4, r6, 0x0, 0x7ffff004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="00000000b702020000000000850000000000000000000000993fdd1d00000000", @ANYRES32=r6, @ANYBLOB="0000000000000000180000000e000000000000000a0000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x7f, &(0x7f00000009c0)=""/127, 0x40f00, 0x13, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000b80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xa, 0x3, 0xa}, 0x10, 0x2246e, r6, 0x6, &(0x7f0000000c00)=[r5, r6, r4, r5, r6], &(0x7f0000000c40)=[{0x2, 0x2, 0xb, 0x6}, {0x1, 0x4, 0x2, 0x9}, {0x3, 0x2, 0xa, 0x2}, {0xfffffffe, 0x4, 0x3, 0x8}, {0x0, 0x3, 0x9, 0xb}, {0x3, 0x3, 0x0, 0x7}], 0x10, 0x4}, 0x94) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffaf8102b38790e4edadeb07a0c0ffffffffff0400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000100"/112], 0xb8}}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 5.809961811s ago: executing program 4 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 5.656158815s ago: executing program 4 (id=129): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="1802028040000140240001007072696f72697479000000000000000000000000000000000000100000000000050003000e"], 0x234}, 0x1, 0x0, 0x0, 0x4000431}, 0xc040) 5.572965337s ago: executing program 4 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000000d40)={0x2020}, 0x2020) 5.144827616s ago: executing program 0 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.972303551s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "245f48edcb63b703", "32d8ea43b6bfb410c5913d8c904f3a01", "a2913283", "866c88900778f2a3"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f00000001c0)=0xa, 0x1959cc36) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x80000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000300)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x42003, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {0x1, 0x6, 0x4006}, 0x189, 0x0, 0x0, 0x10000002, 0x5, 0x8, 0x38, 0xa, 0x7b, 0x4, 0x2, 0x1, 0x84, 0x10001, 0x9, 0xfff, 0x100000004, 0x40000000000000ae}}, 0xa0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.819727768s ago: executing program 2 (id=135): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000028210240000064862c000000030a0503000066ff00000000020000000900010073000000140000001100010000000000000000000000000000000007472a4c10957b20a37ee15ab46c1ae64abfc7d1e04f23d47d74a5d28257724f9ef26e4dba8022b2df544ad798a4f94deb18bbb3e53283a008b036c8c04f0ad8630377a220da2c91ddde9a928c4498410d6a50dfe6a269d5a3d4d824c466e52ed518b567c104af1c0e943d44986aca91"], 0x7c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='fc', 0x2) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000440)={r0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x16b002, 0x44) write(r5, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) 3.605445704s ago: executing program 3 (id=137): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 2.549186679s ago: executing program 2 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=@getchain={0x2c, 0x66, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {0xe, 0xe}, {0x0, 0xfff2}}, [{0x8, 0xb, 0xeb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0xe, {"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", 0x942}}, 0x1006) 2.450942492s ago: executing program 3 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8137, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x9e, 0x4) sendto$inet6(r3, 0x0, 0x21, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) unshare(0x2040400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x7ff, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 1.222375861s ago: executing program 2 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 1.212949351s ago: executing program 3 (id=141): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x4000081) 1.147825163s ago: executing program 0 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0xfff, 0x0, 0x0, 0x800, 0x7}, {0x4, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020a000102"], 0x6c}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x8001, 0x8, 0x9, 0x3ba}, {0x7fff, 0x2, 0xff, 0x5}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$inet(r4, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYBLOB="00000000000000000800040004060000"], 0x30}}, 0x0) ftruncate(r6, 0x2000009) sendfile(r4, r6, 0x0, 0x7ffff004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="00000000b702020000000000850000000000000000000000993fdd1d00000000", @ANYRES32=r6, @ANYBLOB="0000000000000000180000000e000000000000000a0000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x6, 0x7f, &(0x7f00000009c0)=""/127, 0x40f00, 0x13, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000b80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xa, 0x3, 0xa}, 0x10, 0x2246e, r6, 0x6, &(0x7f0000000c00)=[r5, r6, r4, r5, r6], &(0x7f0000000c40)=[{0x2, 0x2, 0xb, 0x6}, {0x1, 0x4, 0x2, 0x9}, {0x3, 0x2, 0xa, 0x2}, {0xfffffffe, 0x4, 0x3, 0x8}, {0x0, 0x3, 0x9, 0xb}, {0x3, 0x3, 0x0, 0x7}], 0x10, 0x4}, 0x94) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffaf8102b38790e4edadeb07a0c0ffffffffff0400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000100"/112], 0xb8}}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 1.121442043s ago: executing program 2 (id=143): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000370007"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003700010000000000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000200025a729bd7000f5dbdf0900000000000000010200d06026beb8f38d6a5bcf7d36775e83010008000600fe7f000008000d006e850000"], 0x2c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x44050) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x12dd635dc4312611, 0xffffffffffffffff, 0x28f41000) read(r4, &(0x7f0000000240)=""/145, 0x91) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000300)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xa00965, 0x2}) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800480000680065000000019078ac1e0001ac1414aa830b1dac14141dac1414bb000b019078000b00004073040701110001e00000027f000001940400009404000044244870e0000000000054300000000c00000005000000b1000008000000313600000002"], 0x0) 1.053427055s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) sendfile(r1, r0, 0x0, 0x7ffff000) 944.000358ms ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "245f48edcb63b703", "32d8ea43b6bfb410c5913d8c904f3a01", "a2913283", "866c88900778f2a3"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f00000001c0)=0xa, 0x1959cc36) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x80000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000300)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x42003, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {0x1, 0x6, 0x4006}, 0x189, 0x0, 0x0, 0x10000002, 0x5, 0x8, 0x38, 0xa, 0x7b, 0x4, 0x2, 0x1, 0x84, 0x10001, 0x9, 0xfff, 0x100000004, 0x40000000000000ae}}, 0xa0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 753.825312ms ago: executing program 1 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @generic={0x200, 0x968, 0x6, 0x0, 0x4, @remote, "", @multicast}}}}, 0x0) 702.635194ms ago: executing program 1 (id=147): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41f4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001140)={0x1, &(0x7f0000001180)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000011c0)=0x2) 268.036884ms ago: executing program 4 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003440)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x4}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) 260.844984ms ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x3d, 0x0, @thr={&(0x7f0000000240)="4c788a98bf86c0b89bafaae0c9c1cf93bba974934a156bf7abd708a8f0c48127eb30c2c3a086a20cd1a8547d8cabc4be0bef7d6eed8a94443b91ab28d73e110ed17a15b08d2ce17638becf1fd96a39ad08776b86b78bb0755cf4f741ee3a043a3694811b973adcc15bd18787734cb7e54ffb4eb4bae2aed449b2884e2d96b74c7c3cae7cd67767f4ab8740d05077294f5d9d684d8c1a28d3586276e14523ebda05545796da2d1e5408b8419c2c4cc3bf10803a7b8eb3c8d35988011dde1fdb5bab4f0d27df8152c664a8fb45264d6353c89c", &(0x7f0000000340)="2119f2adfefb7aeeb5a66be17df606ca1ac2803c6fd1bc28011b7c007a58650b6f339b52d2b84cdc5e6da04b4e"}}, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) io_uring_setup(0x1b7b, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$sndpcmc(&(0x7f0000001980), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000019c0), 0x800, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000001a40)={r3, r4/1000+60000}, 0x10) bind$inet6(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) io_setup(0x2007, &(0x7f0000001ac0)=0x0) eventfd2(0x3, 0x80000) io_getevents(r5, 0x1, 0x0, &(0x7f0000000000), 0x0) io_submit(r5, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001b40), 0x40002, 0x0) write$rfkill(r6, &(0x7f0000001b80)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) r7 = syz_open_dev$cec(&(0x7f0000001bc0), 0x0, 0xa0800) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000001c00)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) 201.685265ms ago: executing program 4 (id=150): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000f00)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x3b24d1d00c4f8c2) 148.008657ms ago: executing program 2 (id=151): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000640)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[], 0x30}}, 0x40) 109.276198ms ago: executing program 4 (id=152): r0 = epoll_create1(0x80000) syz_emit_ethernet(0x6c, &(0x7f0000000480)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x36, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36eeca6fad"}}}}}}}, 0x0) timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f00000002c0)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000003c0)={0x0, 0xe, 0x1, 'queue0\x00'}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0xc040) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, r3, 0x10) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0, 0x0, 0x5, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2016}) 0s ago: executing program 3 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8137, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x9e, 0x4) sendto$inet6(r3, 0x0, 0x21, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) unshare(0x2040400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x7ff, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 63.734092][ T4174] cgroup: Unknown subsys name 'net' [ 63.827948][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.315876][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.960389][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.962279][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 66.974996][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 66.975945][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 66.984295][ T4187] rdma_rxe: failed to add rxe_eth0 [ 66.990931][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 67.004520][ T4194] rdma_rxe: failed to add rxe_eth0 [ 67.017111][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.025366][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.041346][ T4186] rdma_rxe: failed to add rxe_eth0 [ 67.046889][ T4188] rdma_rxe: failed to add rxe_eth0 [ 67.125400][ T4192] infiniband rxe0: set active [ 67.132294][ T4192] infiniband rxe0: added rxe_eth0 [ 67.138385][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.188827][ T4192] RDS/IB: rxe0: added [ 67.192743][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.195355][ T4192] smc: adding ib device rxe0 with port count 1 [ 67.206194][ T4192] smc: ib device rxe0 port 1 has pnetid [ 67.224915][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.334816][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.453154][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.495851][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.578166][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.704811][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.711949][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.726421][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.744038][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.751425][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.759679][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.767745][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.778131][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.830783][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.838140][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.847253][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.860431][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.887336][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.909221][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.924622][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.944470][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.031423][ T4194] team0: Port device team_slave_0 added [ 68.083989][ T4194] team0: Port device team_slave_1 added [ 68.102935][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.112637][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.120838][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.129267][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.155374][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.174141][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.182122][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.194167][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.202038][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.209448][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.224632][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.257126][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.284707][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.291697][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.330782][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.368383][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.391072][ T4187] team0: Port device team_slave_0 added [ 68.403399][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.436423][ T4187] team0: Port device team_slave_1 added [ 68.454908][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.510122][ T4194] device hsr_slave_0 entered promiscuous mode [ 68.519843][ T4194] device hsr_slave_1 entered promiscuous mode [ 68.544218][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.552973][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.579786][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.596409][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.603398][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.629727][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.676334][ T4186] team0: Port device team_slave_0 added [ 68.687779][ T4186] team0: Port device team_slave_1 added [ 68.740014][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.747251][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.754114][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.762369][ T4187] Cannot create hsr debugfs directory [ 68.778014][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.785412][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.793244][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.813711][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.820847][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.846977][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.859815][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.866838][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.892779][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.908419][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.915696][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.923743][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.955449][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 68.964823][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 68.971443][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 68.974624][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 68.984583][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 69.023707][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.036540][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.065343][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.072127][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.079449][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.087373][ T4186] Cannot create hsr debugfs directory [ 69.141405][ T4188] team0: Port device team_slave_0 added [ 69.149525][ T4188] team0: Port device team_slave_1 added [ 69.227018][ T3852] infiniband rxe0: set active [ 69.241092][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.248266][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.275176][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.294652][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.302030][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.314104][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.341573][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.449884][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.475719][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.482761][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.494937][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.502532][ T4188] Cannot create hsr debugfs directory [ 69.522704][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.541954][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.565374][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.578697][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.692817][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.700110][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.708413][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.741074][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.748489][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.758500][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.779990][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.811367][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.822072][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.832436][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.845739][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.869654][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.911851][ T4192] team0: Port device team_slave_0 added [ 69.939482][ T4192] team0: Port device team_slave_1 added [ 69.963747][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.987431][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.019249][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.030158][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.037370][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.063711][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.080613][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.094509][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.116164][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.123161][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.151163][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.188379][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.195477][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.202187][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.210407][ T4192] Cannot create hsr debugfs directory [ 70.232701][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.246370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.257087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.297240][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.309944][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.319477][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.329302][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.336770][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.348400][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.367249][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.376888][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.387822][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.397235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.407765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.416935][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.424022][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.438655][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.486556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.518118][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.536575][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.546799][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.556598][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.565659][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.575363][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.594271][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.603278][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.638682][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.656631][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.670465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.679974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.689594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.697903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.717007][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.767478][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.778160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.790683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.800655][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.807827][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.849909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.860124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.869272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.878277][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.885470][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.893946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.905007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.935851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.949820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.959737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.970837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.980469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.989742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.000915][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.019979][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.030145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.037710][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 71.045026][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 71.051438][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 71.057363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.060292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.076820][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 71.083073][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 71.083681][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.106583][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.126640][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.135862][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.144756][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.151829][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.161466][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.170695][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.179464][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.186582][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.194506][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.204182][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.214974][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221476][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.224137][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.240567][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.250279][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.259062][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.269699][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.279868][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.291190][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.300874][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.314528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.323314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.331945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.340248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.350356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.361135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.386533][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.394759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.404208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.420188][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.427344][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.442874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.453436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.468950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.482681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.494609][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.501717][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.509842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.521245][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.531490][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.560576][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.581705][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.602894][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.613166][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.622861][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.634067][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.643559][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.652926][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.695505][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.703668][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.723332][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.732643][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.741776][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.758508][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.775138][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.804552][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.819938][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.829565][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.858911][ T4194] device veth0_vlan entered promiscuous mode [ 71.874203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.885931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.900885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.910293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.931504][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.966532][ T4194] device veth1_vlan entered promiscuous mode [ 71.981514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.993596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.004285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.057568][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.069473][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.081124][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.102660][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.124056][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.134697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.145205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.157278][ T4194] device veth0_macvtap entered promiscuous mode [ 72.176317][ T4194] device veth1_macvtap entered promiscuous mode [ 72.192798][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.202892][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.211895][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.226711][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.242111][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.253552][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.265311][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.278042][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.297534][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.311012][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.340984][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.350840][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.365670][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.374249][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.389977][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.400722][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.416408][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.423514][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.438251][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.448829][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.457060][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.474073][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.492683][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.503154][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.517574][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.530520][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.541777][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.548950][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.568836][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.589611][ T4187] device veth0_vlan entered promiscuous mode [ 72.623463][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.632200][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.650629][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.660125][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.669570][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.678707][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.687787][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.696514][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.705543][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.714180][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.723427][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.744014][ T4187] device veth1_vlan entered promiscuous mode [ 72.773978][ T4186] device veth0_vlan entered promiscuous mode [ 72.782677][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.793388][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.802592][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.811764][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.828079][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.840872][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.850537][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.859316][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.868345][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.878960][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.888453][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.897346][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.906228][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.914039][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.931197][ T4186] device veth1_vlan entered promiscuous mode [ 72.955959][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.971000][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.981708][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.998372][ T4188] device veth0_vlan entered promiscuous mode [ 73.025769][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.038705][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.049197][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.097274][ T4188] device veth1_vlan entered promiscuous mode [ 73.108736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.117324][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 73.127732][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 73.136096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.144326][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 73.150984][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 73.157996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.167020][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 73.187842][ T4187] device veth0_macvtap entered promiscuous mode [ 73.209333][ T4186] device veth0_macvtap entered promiscuous mode [ 73.247276][ T4187] device veth1_macvtap entered promiscuous mode [ 73.258834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.269501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.278518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.288262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.298544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.307905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.321172][ T4186] device veth1_macvtap entered promiscuous mode [ 73.361992][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.374142][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.388160][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.399095][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.409853][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.424982][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.436503][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.454127][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.474921][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.487359][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.498774][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.508269][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.517708][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.526634][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.538084][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.547437][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.557172][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.566656][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.580527][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.591407][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.602341][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.613395][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.625169][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.643493][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.663761][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.672673][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.688402][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.697829][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.713643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.722948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.732574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.740232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.750677][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.760316][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769336][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778357][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.796367][ T4188] device veth0_macvtap entered promiscuous mode [ 73.815348][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.823395][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.855782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.872783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.881440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.890301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.899718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.908150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.942715][ T4188] device veth1_macvtap entered promiscuous mode [ 73.961744][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.977940][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.018020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.030976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.048392][ T4192] device veth0_vlan entered promiscuous mode [ 74.067119][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.084243][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.101600][ T4192] device veth1_vlan entered promiscuous mode [ 74.157620][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.170281][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.178992][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.195892][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.209850][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.218852][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.232996][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.245178][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.256944][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.269227][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.280307][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.293343][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.319861][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.329981][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.339824][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.349323][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.370459][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.382980][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.395068][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.410511][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.420866][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.432233][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.445404][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.457998][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.467526][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.478903][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490452][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.505090][ T4302] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 74.513310][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.522407][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.532383][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.547590][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.561082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.602933][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.621589][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.651694][ T4192] device veth0_macvtap entered promiscuous mode [ 74.663263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.673105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.682814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.725887][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.735363][ T4192] device veth1_macvtap entered promiscuous mode [ 74.749412][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.764018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.782171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.794311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.834310][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.842350][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.903426][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.916979][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.019832][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.036883][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.047493][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.058691][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.069191][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.080315][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.123689][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.162890][ T4311] Invalid ELF header magic: != ELF [ 75.440539][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.867615][ T4309] Bluetooth: hci0: command 0x0419 tx timeout [ 75.873767][ T4309] Bluetooth: hci4: command 0x0419 tx timeout [ 75.879899][ T4309] Bluetooth: hci3: command 0x0419 tx timeout [ 75.887006][ T4309] Bluetooth: hci2: command 0x0419 tx timeout [ 75.897809][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.905730][ T4309] Bluetooth: hci1: command 0x0419 tx timeout [ 75.923245][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.956476][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.003535][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.020026][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.976814][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.998100][ T4189] libceph: connect (1)[c::]:6789 error -101 [ 77.005495][ T4189] libceph: mon0 (1)[c::]:6789 connect error [ 77.030525][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.050549][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.061100][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.071082][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.082958][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.092857][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.099005][ T4327] ceph: No mds server is up or the cluster is laggy [ 77.105439][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.125272][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.144237][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153289][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162077][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.173095][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.193439][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.222389][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.255631][ T4336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.377717][ T4340] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 77.393245][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.408124][ T4340] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 77.416669][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.432934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.480841][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.499960][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.528996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.668015][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.676393][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.719900][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.727274][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.735863][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.742978][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.762071][ T4348] team0: Port device bridge0 added [ 78.003580][ T4267] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.074967][ T1109] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 78.264587][ T4267] usb 2-1: Using ep0 maxpacket: 8 [ 78.410671][ T4267] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 78.434713][ T4267] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.444967][ T4267] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.456390][ T4267] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.472222][ T4267] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.494738][ T4267] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.503902][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.771121][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.784850][ T4267] usb 2-1: usb_control_msg returned -32 [ 78.790661][ T4267] usbtmc 2-1:16.0: can't read capabilities [ 78.796815][ T1109] usb 1-1: string descriptor 0 read error: -22 [ 78.803096][ T1109] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 78.846266][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.901335][ T1109] usb 1-1: config 0 descriptor?? [ 78.962645][ T1109] usbtest 1-1:0.0: FX2 device [ 78.975953][ T1109] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 79.014542][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 79.144559][ T23] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.174459][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 79.193222][ T1109] usb 1-1: USB disconnect, device number 2 [ 79.409705][ T4350] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 79.435004][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 79.444130][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.453070][ T23] usb 5-1: Product: syz [ 79.457383][ T23] usb 5-1: Manufacturer: syz [ 79.462187][ T23] usb 5-1: SerialNumber: syz [ 79.467263][ T4374] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 79.522348][ T4378] Invalid ELF header magic: != ELF [ 79.580258][ T4189] usb 2-1: USB disconnect, device number 2 [ 80.319357][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.368705][ T4385] device-mapper: ioctl: Unable to rename non-existent device, to V¶>M* [ 80.511517][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 80.525695][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 80.624676][ T4189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.604780][ T23] usbhid 5-1:1.0: can't add hid device: -71 [ 81.610843][ T23] usbhid: probe of 5-1:1.0 failed with error -71 [ 81.764967][ T23] usb 5-1: USB disconnect, device number 2 [ 81.968796][ T4427] process 'syz.1.29' launched './file0' with NULL argv: empty string added [ 82.765127][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 82.864755][ T4442] input: syz1 as /devices/virtual/input/input5 [ 82.924056][ T4442] Zero length message leads to an empty skb [ 82.951499][ T4448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.073552][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 83.384959][ T4456] netlink: 168 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.174406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.184408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.194396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.204393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.214391][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.224401][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.234396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.244386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.254382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.264385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.805097][ T4476] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.999749][ T4478] binder: 4472:4478 ioctl 4018620d 0 returned -22 [ 86.603153][ T1107] cfg80211: failed to load regulatory.db [ 87.471559][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 87.784344][ C0] sched: RT throttling activated [ 88.150821][ T4503] 9pnet_virtio: no channels available for device syz [ 91.746282][ T4539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.797928][ T4540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.060225][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 92.949585][ T4549] loop2: detected capacity change from 0 to 256 [ 92.997791][ T4549] ======================================================= [ 92.997791][ T4549] WARNING: The mand mount option has been deprecated and [ 92.997791][ T4549] and is ignored by this kernel. Remove the mand [ 92.997791][ T4549] option from the mount to silence this warning. [ 92.997791][ T4549] ======================================================= [ 94.333208][ T154] attempt to access beyond end of device [ 94.333208][ T154] loop2: rw=1, want=544, limit=256 [ 95.770078][ T154] attempt to access beyond end of device [ 95.770078][ T154] loop2: rw=1, want=1024, limit=256 [ 95.859738][ T154] attempt to access beyond end of device [ 95.859738][ T154] loop2: rw=1, want=15776, limit=256 [ 95.978416][ T154] attempt to access beyond end of device [ 95.978416][ T154] loop2: rw=1, want=29336, limit=256 [ 96.043446][ T154] attempt to access beyond end of device [ 96.043446][ T154] loop2: rw=1, want=32832, limit=256 [ 97.633253][ T4501] ODEBUG: Out of memory. ODEBUG disabled [ 97.915642][ T4199] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.184420][ T4199] usb 3-1: Using ep0 maxpacket: 32 [ 98.253295][ T4592] netem: change failed [ 98.314977][ T4199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.333235][ T4199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.351953][ T4199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.374390][ T4199] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 98.392240][ T4199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.425391][ T4199] usb 3-1: config 0 descriptor?? [ 98.486410][ T4600] FAULT_INJECTION: forcing a failure. [ 98.486410][ T4600] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.504476][ T4600] CPU: 0 PID: 4600 Comm: syz.0.82 Not tainted syzkaller #0 [ 98.511735][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.521839][ T4600] Call Trace: [ 98.525145][ T4600] [ 98.528101][ T4600] dump_stack_lvl+0x188/0x250 [ 98.532859][ T4600] ? show_regs_print_info+0x20/0x20 [ 98.538089][ T4600] ? load_image+0x410/0x410 [ 98.542622][ T4600] ? __lock_acquire+0x7d40/0x7d40 [ 98.547789][ T4600] should_fail+0x383/0x4b0 [ 98.552253][ T4600] prepare_alloc_pages+0x1e3/0x5b0 [ 98.557410][ T4600] __alloc_pages+0x11b/0x480 [ 98.562037][ T4600] ? stack_trace_save+0xf0/0xf0 [ 98.566926][ T4600] ? zone_statistics+0x170/0x170 [ 98.571903][ T4600] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.578036][ T4600] ? alloc_pages+0x452/0x560 [ 98.582693][ T4600] stack_depot_save+0x356/0x460 [ 98.587582][ T4600] save_stack+0x12f/0x230 [ 98.591953][ T4600] ? __reset_page_owner+0x180/0x180 [ 98.597181][ T4600] ? get_page_from_freelist+0x24f6/0x2670 [ 98.602931][ T4600] ? __alloc_pages+0x1ee/0x480 [ 98.607745][ T4600] ? stack_depot_save+0x356/0x460 [ 98.612800][ T4600] ? __kasan_slab_alloc+0xa9/0xc0 [ 98.617857][ T4600] ? slab_post_alloc_hook+0x4c/0x380 [ 98.623200][ T4600] ? kmem_cache_alloc+0x15d/0x280 [ 98.628248][ T4600] ? __pmd_alloc+0x116/0x750 [ 98.632887][ T4600] ? handle_mm_fault+0xbd3/0x4440 [ 98.637933][ T4600] ? __get_user_pages+0x952/0x11e0 [ 98.643072][ T4600] ? __get_user_pages_remote+0x1c2/0x730 [ 98.648878][ T4600] ? get_arg_page+0x11b/0x350 [ 98.653592][ T4600] ? copy_string_kernel+0x14d/0x280 [ 98.658832][ T4600] ? do_execveat_common+0x360/0x6b0 [ 98.664061][ T4600] ? __x64_sys_execveat+0xc0/0xe0 [ 98.669126][ T4600] ? do_syscall_64+0x4c/0xa0 [ 98.673746][ T4600] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.679854][ T4600] ? lock_chain_count+0x20/0x20 [ 98.684740][ T4600] ? preempt_count_add+0x8d/0x190 [ 98.689799][ T4600] __set_page_owner+0x41/0x2d0 [ 98.694597][ T4600] ? post_alloc_hook+0x106/0x220 [ 98.699569][ T4600] get_page_from_freelist+0x24f6/0x2670 [ 98.705147][ T4600] ? __rwlock_init+0x140/0x140 [ 98.709961][ T4600] ? __alloc_pages+0x11b/0x480 [ 98.714788][ T4600] ? __lock_acquire+0x7d40/0x7d40 [ 98.719853][ T4600] ? __alloc_pages+0x480/0x480 [ 98.724648][ T4600] ? prepare_alloc_pages+0x359/0x5b0 [ 98.729976][ T4600] __alloc_pages+0x1ee/0x480 [ 98.734619][ T4600] ? unwind_get_return_address+0x49/0x80 [ 98.740290][ T4600] ? zone_statistics+0x170/0x170 [ 98.745280][ T4600] ? alloc_pages+0x452/0x560 [ 98.749914][ T4600] stack_depot_save+0x356/0x460 [ 98.754811][ T4600] __kasan_slab_alloc+0xa9/0xc0 [ 98.759701][ T4600] ? __kasan_slab_alloc+0x92/0xc0 [ 98.764757][ T4600] ? slab_post_alloc_hook+0x4c/0x380 [ 98.770114][ T4600] ? kmem_cache_alloc+0x15d/0x280 [ 98.775181][ T4600] ? __pmd_alloc+0x116/0x750 [ 98.779930][ T4600] ? handle_mm_fault+0xbd3/0x4440 [ 98.784993][ T4600] ? __get_user_pages+0x952/0x11e0 [ 98.790148][ T4600] ? __get_user_pages_remote+0x1c2/0x730 [ 98.795817][ T4600] ? get_arg_page+0x11b/0x350 [ 98.800527][ T4600] ? copy_string_kernel+0x14d/0x280 [ 98.805849][ T4600] ? do_execveat_common+0x360/0x6b0 [ 98.811078][ T4600] ? __x64_sys_execveat+0xc0/0xe0 [ 98.816130][ T4600] ? do_syscall_64+0x4c/0xa0 [ 98.820743][ T4600] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.826880][ T4600] slab_post_alloc_hook+0x4c/0x380 [ 98.832021][ T4600] ? should_failslab+0x5/0x20 [ 98.836752][ T4600] ? __pmd_alloc+0x116/0x750 [ 98.841381][ T4600] kmem_cache_alloc+0x15d/0x280 [ 98.846281][ T4600] __pmd_alloc+0x116/0x750 [ 98.850747][ T4600] ? __lock_acquire+0x7d40/0x7d40 [ 98.855848][ T4600] ? do_raw_spin_lock+0x128/0x2f0 [ 98.860910][ T4600] ? __pud_alloc+0x140/0x140 [ 98.865536][ T4600] ? __rwlock_init+0x140/0x140 [ 98.870336][ T4600] ? count_memcg_event_mm+0x324/0x370 [ 98.875746][ T4600] ? do_raw_spin_unlock+0x11d/0x230 [ 98.880979][ T4600] ? _raw_spin_unlock+0x24/0x40 [ 98.886092][ T4600] ? __pud_alloc+0x122/0x140 [ 98.890770][ T4600] handle_mm_fault+0xbd3/0x4440 [ 98.895670][ T4600] ? get_page+0xe0/0xe0 [ 98.899866][ T4600] ? follow_page_mask+0x272/0x12b0 [ 98.905017][ T4600] ? vma_is_secretmem+0x9/0x40 [ 98.909813][ T4600] ? check_vma_flags+0x359/0x470 [ 98.914790][ T4600] __get_user_pages+0x952/0x11e0 [ 98.919779][ T4600] ? populate_vma_page_range+0x290/0x290 [ 98.925452][ T4600] ? __might_sleep+0xf0/0xf0 [ 98.930078][ T4600] ? read_lock_is_recursive+0x10/0x10 [ 98.935491][ T4600] __get_user_pages_remote+0x1c2/0x730 [ 98.940995][ T4600] ? get_user_pages_remote+0x55/0xa0 [ 98.946333][ T4600] get_arg_page+0x11b/0x350 [ 98.950891][ T4600] ? copy_string_kernel+0x280/0x280 [ 98.956751][ T4600] ? up_write+0x1b6/0x410 [ 98.961134][ T4600] copy_string_kernel+0x14d/0x280 [ 98.966196][ T4600] do_execveat_common+0x360/0x6b0 [ 98.971266][ T4600] __x64_sys_execveat+0xc0/0xe0 [ 98.976149][ T4600] do_syscall_64+0x4c/0xa0 [ 98.980592][ T4600] ? clear_bhb_loop+0x30/0x80 [ 98.985309][ T4600] ? clear_bhb_loop+0x30/0x80 [ 98.990035][ T4600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.995972][ T4600] RIP: 0033:0x7f5ac4d97559 [ 99.000417][ T4600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.020049][ T4600] RSP: 002b:00007f5ac2fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 99.028503][ T4600] RAX: ffffffffffffffda RBX: 00007f5ac501efa0 RCX: 00007f5ac4d97559 [ 99.036645][ T4600] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 99.044661][ T4600] RBP: 00007f5ac4e2eab8 R08: 0000000000001000 R09: 0000000000000000 [ 99.052671][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.060671][ T4600] R13: 00007f5ac501f038 R14: 00007f5ac501efa0 R15: 00007ffe2613e4e8 [ 99.068700][ T4600] [ 100.743009][ T4596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.773516][ T4606] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 100.822316][ T4606] netlink: 'syz.2.76': attribute type 2 has an invalid length. [ 100.921219][ T4501] Set syz0 is full, maxelem 65536 reached [ 101.215484][ T4618] binder_alloc: 4617: binder_alloc_buf, no vma [ 102.214788][ T4199] usbhid 3-1:0.0: can't add hid device: -71 [ 102.220909][ T4199] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.335627][ T4199] usb 3-1: USB disconnect, device number 2 [ 104.955792][ T4650] sctp: failed to load transform for md5: -2 [ 104.969910][ T4655] ALSA: mixer_oss: invalid OSS volume '' [ 105.343295][ T4670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 105.401400][ T4670] IPv6: Can't replace route, no match found [ 105.531472][ T4672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 105.786225][ T4685] tipc: Started in network mode [ 105.791519][ T4685] tipc: Node identity 0259e5723ff7, cluster identity 4711 [ 105.870147][ T4685] tipc: Enabled bearer , priority 0 [ 105.894201][ T4690] serio: Serial port ptm1 [ 106.194563][ T4309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.055960][ T21] tipc: Node number set to 1034872178 [ 107.364445][ T4309] usb 5-1: Using ep0 maxpacket: 16 [ 107.844570][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.858859][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.869095][ T4309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.882440][ T4309] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.891603][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.917487][ T4309] usb 5-1: config 0 descriptor?? [ 107.954994][ T4716] FAULT_INJECTION: forcing a failure. [ 107.954994][ T4716] name failslab, interval 1, probability 0, space 0, times 1 [ 107.979056][ T4716] CPU: 0 PID: 4716 Comm: syz.3.113 Not tainted syzkaller #0 [ 107.986556][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.996662][ T4716] Call Trace: [ 108.000005][ T4716] [ 108.002966][ T4716] dump_stack_lvl+0x188/0x250 [ 108.007692][ T4716] ? show_regs_print_info+0x20/0x20 [ 108.012932][ T4716] ? load_image+0x410/0x410 [ 108.017476][ T4716] ? __might_sleep+0xf0/0xf0 [ 108.022120][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 108.027187][ T4716] should_fail+0x383/0x4b0 [ 108.031645][ T4716] should_failslab+0x5/0x20 [ 108.036190][ T4716] slab_pre_alloc_hook+0x51/0xc0 [ 108.041171][ T4716] __kmalloc+0x6b/0x340 [ 108.045366][ T4716] ? security_sb_alloc+0x3d/0x120 [ 108.050434][ T4716] security_sb_alloc+0x3d/0x120 [ 108.055333][ T4716] alloc_super+0x208/0x970 [ 108.059790][ T4716] ? kernfs_get_tree+0x6b0/0x6b0 [ 108.064771][ T4716] sget_fc+0x2d4/0x6f0 [ 108.068882][ T4716] ? kernfs_test_super+0x100/0x100 [ 108.074041][ T4716] kernfs_get_tree+0x15c/0x6b0 [ 108.078844][ T4716] ? apparmor_capable+0x12c/0x190 [ 108.083909][ T4716] sysfs_get_tree+0x42/0x110 [ 108.088561][ T4716] vfs_get_tree+0x88/0x270 [ 108.093015][ T4716] do_new_mount+0x247/0xa40 [ 108.097566][ T4716] __se_sys_mount+0x2e3/0x3d0 [ 108.102302][ T4716] ? __x64_sys_mount+0xc0/0xc0 [ 108.107107][ T4716] ? lockdep_hardirqs_on+0x94/0x140 [ 108.112340][ T4716] ? __x64_sys_mount+0x1c/0xc0 [ 108.117140][ T4716] do_syscall_64+0x4c/0xa0 [ 108.121628][ T4716] ? clear_bhb_loop+0x30/0x80 [ 108.126357][ T4716] ? clear_bhb_loop+0x30/0x80 [ 108.131072][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.137002][ T4716] RIP: 0033:0x7fa31d9c9559 [ 108.141479][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.161141][ T4716] RSP: 002b:00007fa31bc21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.169602][ T4716] RAX: ffffffffffffffda RBX: 00007fa31dc50fa0 RCX: 00007fa31d9c9559 [ 108.177613][ T4716] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000000000000000 [ 108.185630][ T4716] RBP: 00007fa31da60ab8 R08: 0000000000000000 R09: 0000000000000000 [ 108.193645][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.201676][ T4716] R13: 00007fa31dc51038 R14: 00007fa31dc50fa0 R15: 00007ffd908cefe8 [ 108.209699][ T4716] [ 108.436670][ T4684] tipc: Disabling bearer [ 108.450266][ T4733] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET) [ 109.018428][ T4309] usbhid 5-1:0.0: can't add hid device: -71 [ 109.092803][ T4309] usbhid: probe of 5-1:0.0 failed with error -71 [ 109.647063][ T4309] usb 5-1: USB disconnect, device number 3 [ 109.852305][ T4780] netlink: 312 bytes leftover after parsing attributes in process `syz.1.121'. [ 111.219144][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 111.578883][ T4821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 112.388389][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 113.552156][ T4851] netlink: 156 bytes leftover after parsing attributes in process `syz.3.136'. [ 114.364530][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 114.373667][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 114.592342][ T4858] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.851526][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 116.049099][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.133232][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 116.249700][ T4876] netlink: 168 bytes leftover after parsing attributes in process `syz.0.142'. [ 117.226583][ T4898] [ 117.228978][ T4898] ====================================================== [ 117.236016][ T4898] WARNING: possible circular locking dependency detected [ 117.243064][ T4898] syzkaller #0 Not tainted [ 117.247498][ T4898] ------------------------------------------------------ [ 117.254533][ T4898] syz.0.149/4898 is trying to acquire lock: [ 117.260468][ T4898] ffff888024658f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 117.271036][ T4898] [ 117.271036][ T4898] but task is already holding lock: [ 117.278424][ T4898] ffff8880246593f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 117.287782][ T4898] [ 117.287782][ T4898] which lock already depends on the new lock. [ 117.287782][ T4898] [ 117.298203][ T4898] [ 117.298203][ T4898] the existing dependency chain (in reverse order) is: [ 117.307240][ T4898] [ 117.307240][ T4898] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 117.314940][ T4898] __mutex_lock_common+0x1e5/0x2400 [ 117.320689][ T4898] mutex_lock_nested+0x17/0x20 [ 117.326001][ T4898] hci_dev_do_close+0x5f/0x1020 [ 117.331405][ T4898] hci_rfkill_set_block+0x101/0x180 [ 117.337163][ T4898] rfkill_set_block+0x1c1/0x3c0 [ 117.342564][ T4898] rfkill_fop_write+0x453/0x560 [ 117.347964][ T4898] vfs_write+0x304/0xd70 [ 117.352754][ T4898] ksys_write+0x153/0x260 [ 117.357629][ T4898] do_syscall_64+0x4c/0xa0 [ 117.362633][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.369166][ T4898] [ 117.369166][ T4898] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 117.377189][ T4898] __mutex_lock_common+0x1e5/0x2400 [ 117.382941][ T4898] mutex_lock_nested+0x17/0x20 [ 117.388282][ T4898] rfkill_register+0x2f/0x970 [ 117.393509][ T4898] hci_register_dev+0x459/0x980 [ 117.398910][ T4898] vhci_create_device+0x32e/0x5c0 [ 117.404487][ T4898] vhci_write+0x389/0x440 [ 117.409369][ T4898] vfs_write+0x748/0xd70 [ 117.414157][ T4898] ksys_write+0x153/0x260 [ 117.419031][ T4898] do_syscall_64+0x4c/0xa0 [ 117.423993][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.430446][ T4898] [ 117.430446][ T4898] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 117.438301][ T4898] __mutex_lock_common+0x1e5/0x2400 [ 117.444051][ T4898] mutex_lock_nested+0x17/0x20 [ 117.449371][ T4898] vhci_send_frame+0x88/0x100 [ 117.454602][ T4898] hci_send_frame+0x1a9/0x2e0 [ 117.459846][ T4898] hci_tx_work+0x9b5/0x16d0 [ 117.464932][ T4898] process_one_work+0x867/0xff0 [ 117.470338][ T4898] worker_thread+0xad7/0x12a0 [ 117.475569][ T4898] kthread+0x42e/0x520 [ 117.480193][ T4898] ret_from_fork+0x1f/0x30 [ 117.485163][ T4898] [ 117.485163][ T4898] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 117.494405][ T4898] __lock_acquire+0x38f7/0x7d40 [ 117.499808][ T4898] lock_acquire+0x19f/0x400 [ 117.504865][ T4898] __flush_work+0x116/0x210 [ 117.509937][ T4898] hci_dev_do_close+0x201/0x1020 [ 117.515423][ T4898] hci_rfkill_set_block+0x101/0x180 [ 117.521177][ T4898] rfkill_set_block+0x1c1/0x3c0 [ 117.526593][ T4898] rfkill_fop_write+0x453/0x560 [ 117.531995][ T4898] vfs_write+0x304/0xd70 [ 117.536786][ T4898] ksys_write+0x153/0x260 [ 117.541665][ T4898] do_syscall_64+0x4c/0xa0 [ 117.546651][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.553101][ T4898] [ 117.553101][ T4898] other info that might help us debug this: [ 117.553101][ T4898] [ 117.563351][ T4898] Chain exists of: [ 117.563351][ T4898] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 117.563351][ T4898] [ 117.578328][ T4898] Possible unsafe locking scenario: [ 117.578328][ T4898] [ 117.585886][ T4898] CPU0 CPU1 [ 117.591268][ T4898] ---- ---- [ 117.596653][ T4898] lock(&hdev->req_lock); [ 117.601098][ T4898] lock(rfkill_global_mutex); [ 117.608410][ T4898] lock(&hdev->req_lock); [ 117.615379][ T4898] lock((work_completion)(&hdev->tx_work)); [ 117.621389][ T4898] [ 117.621389][ T4898] *** DEADLOCK *** [ 117.621389][ T4898] [ 117.629552][ T4898] 2 locks held by syz.0.149/4898: [ 117.634617][ T4898] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 117.644754][ T4898] #1: ffff8880246593f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 117.654551][ T4898] [ 117.654551][ T4898] stack backtrace: [ 117.660475][ T4898] CPU: 1 PID: 4898 Comm: syz.0.149 Not tainted syzkaller #0 [ 117.667785][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.677866][ T4898] Call Trace: [ 117.681182][ T4898] [ 117.684141][ T4898] dump_stack_lvl+0x188/0x250 [ 117.688893][ T4898] ? load_image+0x410/0x410 [ 117.693423][ T4898] ? show_regs_print_info+0x20/0x20 [ 117.698654][ T4898] ? print_circular_bug+0x12b/0x1a0 [ 117.704027][ T4898] check_noncircular+0x2f8/0x400 [ 117.709001][ T4898] ? look_up_lock_class+0x71/0x110 [ 117.715804][ T4898] ? print_deadlock_bug+0x5d0/0x5d0 [ 117.721040][ T4898] ? lockdep_lock+0xf1/0x1f0 [ 117.725671][ T4898] ? mark_lock+0x94/0x320 [ 117.730066][ T4898] ? _find_first_zero_bit+0xd1/0xf0 [ 117.735307][ T4898] __lock_acquire+0x38f7/0x7d40 [ 117.740210][ T4898] ? mark_lock+0x94/0x320 [ 117.744569][ T4898] ? verify_lock_unused+0x140/0x140 [ 117.749891][ T4898] ? __lock_acquire+0x12df/0x7d40 [ 117.754948][ T4898] ? start_flush_work+0x784/0x830 [ 117.760050][ T4898] lock_acquire+0x19f/0x400 [ 117.764604][ T4898] ? __flush_work+0xfa/0x210 [ 117.769225][ T4898] ? verify_lock_unused+0x140/0x140 [ 117.774465][ T4898] ? read_lock_is_recursive+0x10/0x10 [ 117.779873][ T4898] __flush_work+0x116/0x210 [ 117.784570][ T4898] ? __flush_work+0xfa/0x210 [ 117.789204][ T4898] ? flush_work+0x20/0x20 [ 117.793572][ T4898] ? rcu_lock_release+0x5/0x20 [ 117.798378][ T4898] ? __lock_acquire+0x7d40/0x7d40 [ 117.803453][ T4898] hci_dev_do_close+0x201/0x1020 [ 117.808434][ T4898] hci_rfkill_set_block+0x101/0x180 [ 117.813684][ T4898] ? rcu_lock_release+0x20/0x20 [ 117.818594][ T4898] rfkill_set_block+0x1c1/0x3c0 [ 117.823500][ T4898] rfkill_fop_write+0x453/0x560 [ 117.828564][ T4898] ? rfkill_fop_read+0x560/0x560 [ 117.833547][ T4898] ? common_file_perm+0x160/0x1c0 [ 117.838613][ T4898] ? fsnotify_perm+0x5d/0x560 [ 117.843321][ T4898] ? security_file_permission+0x75/0xa0 [ 117.848898][ T4898] ? rfkill_fop_read+0x560/0x560 [ 117.853968][ T4898] vfs_write+0x304/0xd70 [ 117.858261][ T4898] ? file_end_write+0x250/0x250 [ 117.863156][ T4898] ? __fget_files+0x402/0x470 [ 117.867889][ T4898] ? __fdget_pos+0x1e2/0x370 [ 117.872522][ T4898] ? ksys_write+0x70/0x260 [ 117.876984][ T4898] ksys_write+0x153/0x260 [ 117.881356][ T4898] ? __ia32_sys_read+0x80/0x80 [ 117.886159][ T4898] ? lockdep_hardirqs_on+0x94/0x140 [ 117.891401][ T4898] do_syscall_64+0x4c/0xa0 [ 117.895860][ T4898] ? clear_bhb_loop+0x30/0x80 [ 117.900574][ T4898] ? clear_bhb_loop+0x30/0x80 [ 117.905289][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.911221][ T4898] RIP: 0033:0x7f5ac4d97559 [ 117.915673][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.935312][ T4898] RSP: 002b:00007f5ac2fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.943770][ T4898] RAX: ffffffffffffffda RBX: 00007f5ac501f090 RCX: 00007f5ac4d97559 [ 117.951775][ T4898] RDX: 0000000000000008 RSI: 0000200000001b80 RDI: 000000000000000b [ 117.959774][ T4898] RBP: 00007f5ac4e2eab8 R08: 0000000000000000 R09: 0000000000000000 [ 117.967779][ T4898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.975906][ T4898] R13: 00007f5ac501f128 R14: 00007f5ac501f090 R15: 00007ffe2613e4e8 [ 117.983935][ T4898]