last executing test programs: 5.340282575s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000004a000b002bbd7000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000200000014000100fe8000000000000000000000000000aa14000100ff01000000000000000000000000000114000100fc"], 0x68}}, 0x400800c) 5.273888917s ago: executing program 2 (id=6): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) 5.221510368s ago: executing program 2 (id=7): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x23) 5.087733562s ago: executing program 2 (id=8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x2, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x40800000000001, 0x800000000000002}, 0xdfff, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) 5.055973022s ago: executing program 2 (id=9): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) 3.404134904s ago: executing program 3 (id=14): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x39}}) 3.357180395s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x5, 0xd, "85"}, @TCA_NETEM_DELAY_DIST={0x5, 0x2, "ce"}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/4096}, 0x20) 3.215924509s ago: executing program 3 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 3.214184118s ago: executing program 1 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)}) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x26}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3.087395142s ago: executing program 3 (id=18): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) 3.031603223s ago: executing program 1 (id=19): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 3.024807353s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2c3a00, 0x128) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) mkdir(0x0, 0x0) ioctl$MEMREADOOB64(0xffffffffffffffff, 0x1269, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.843830978s ago: executing program 1 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe04, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x44004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.819172488s ago: executing program 3 (id=21): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aa"], 0x68}, 0x1, 0x0, 0x0, 0x20004881}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.76737121s ago: executing program 4 (id=5): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc000000000000000000000000000001ac1414aa0000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffa319d9"], 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.695904592s ago: executing program 1 (id=22): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x68000080) r3 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 2.657530693s ago: executing program 3 (id=23): unshare(0x28000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 2.620239384s ago: executing program 4 (id=24): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @loopback, 0x9}, 0x1c) shutdown(r5, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) accept$inet6(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.594374004s ago: executing program 0 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.415795289s ago: executing program 3 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40408c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.300439221s ago: executing program 0 (id=27): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) mkdir(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000204002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) 2.280665432s ago: executing program 1 (id=28): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1, 0x1a8697a, 0x7, 0x7f, 0x9ec}) 1.58635955s ago: executing program 4 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 145.28µs ago: executing program 0 (id=30): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x523, 0x0) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2800, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) 0s ago: executing program 2 (id=31): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 59.975727][ T4170] cgroup: Unknown subsys name 'net' [ 60.106624][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.598576][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.153573][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.195666][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.206274][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.225732][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.297669][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.391951][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.399611][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.408264][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.444508][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.452486][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.460851][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.468390][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.476663][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.485153][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.499317][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.506625][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.515474][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.536230][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.543789][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.552543][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.566733][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.574642][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.582917][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.598653][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.606128][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.614775][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.628980][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.637340][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.646011][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.654363][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.661589][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.670240][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.691453][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.707779][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.716347][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.725921][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.750535][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.763132][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.779434][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.791823][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.829445][ T4190] team0: Port device team_slave_0 added [ 63.838048][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.849801][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.862024][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.872501][ T4190] team0: Port device team_slave_1 added [ 63.879752][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.903667][ T4193] team0: Port device team_slave_0 added [ 63.912586][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.938314][ T4193] team0: Port device team_slave_1 added [ 63.977954][ T4189] team0: Port device team_slave_0 added [ 63.986931][ T4186] team0: Port device team_slave_0 added [ 64.000348][ T4186] team0: Port device team_slave_1 added [ 64.006921][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.014142][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.042071][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.055642][ T4189] team0: Port device team_slave_1 added [ 64.084749][ T4192] team0: Port device team_slave_0 added [ 64.092876][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.100836][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.128945][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.141130][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.148107][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.175111][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.195517][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.202810][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.230091][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.263608][ T4192] team0: Port device team_slave_1 added [ 64.273245][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.281024][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.308561][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.328523][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.337231][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.370529][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.400349][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.408329][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.436929][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.449682][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.457253][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.483570][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.499668][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.506962][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.534136][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.551626][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.560162][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.593824][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.669507][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.676808][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.693372][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.701785][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.708666][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.716794][ T4192] Cannot create hsr debugfs directory [ 64.735087][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.742470][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.750379][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.758278][ T4189] Cannot create hsr debugfs directory [ 64.775360][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.782964][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.789905][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.798649][ T4193] Cannot create hsr debugfs directory [ 64.821260][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.826772][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.830296][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.847079][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.856521][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.865031][ T4186] Cannot create hsr debugfs directory [ 64.890188][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.890339][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 64.908180][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 65.221707][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.236233][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.246581][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.259320][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.340967][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.357936][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.381166][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.404076][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.452551][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.464708][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.487838][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.501149][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.508207][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.545197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.562270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.594357][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.603638][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.618624][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.641765][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.655802][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.680558][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.692194][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.702665][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.710572][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.750431][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.759464][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.769576][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.785153][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.795123][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.810565][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.824337][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.836350][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.847757][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.858877][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.870492][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.879924][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.912446][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.922958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.935089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.950822][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.971304][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.979740][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.998154][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.009056][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.032588][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.053377][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.109606][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.153406][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.169317][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.188541][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.197654][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.229451][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.243589][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.254503][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.262594][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.273371][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.283520][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.291134][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.303786][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.314001][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.325444][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.334766][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.346234][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.357747][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.370707][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.386318][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.402797][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.431480][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.444773][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.453988][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.465564][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.472802][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.480873][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.492938][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.502096][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.511982][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.521390][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.528661][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.537371][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.547441][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.558492][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.569921][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.583509][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.598028][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.623573][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.632449][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.643757][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.652683][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.661604][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.671862][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.680982][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.688371][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.696299][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.705419][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.715488][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.724199][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.742046][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.759014][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.768971][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.777876][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.785085][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.804035][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.828846][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.848018][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.862225][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.878723][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.887792][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.896916][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 66.905300][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.913886][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 66.914969][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.929158][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.938155][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.946956][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.955687][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.964638][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.970600][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 66.974197][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.985802][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 66.987164][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.992288][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.027710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.043933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.077901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.102460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.119386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.133983][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.168671][ T4189] device veth0_vlan entered promiscuous mode [ 67.177318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.186075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.198035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.208326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.219610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.231145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.239563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.248788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.258721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.267428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.276289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.284334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.303227][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.318346][ T4189] device veth1_vlan entered promiscuous mode [ 67.329678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.339249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.351475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.361657][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.369197][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.378369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.388858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.425007][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.446553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.458022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.467134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.478764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.488255][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.495524][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.506324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.536833][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.545200][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.555084][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.565180][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.586683][ T4189] device veth0_macvtap entered promiscuous mode [ 67.601360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.613839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.622992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.634082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.647891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.657271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.667122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.682497][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.695130][ T4189] device veth1_macvtap entered promiscuous mode [ 67.729560][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.739255][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.748853][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.758155][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.768326][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.809546][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.822092][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.831810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.841183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.850876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.858429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.866909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.877308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.899072][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.912174][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.927408][ T4190] device veth0_vlan entered promiscuous mode [ 67.944572][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.958340][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.968505][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.979464][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.000986][ T4186] device veth0_vlan entered promiscuous mode [ 68.012190][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.027389][ T4190] device veth1_vlan entered promiscuous mode [ 68.035241][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.043820][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.052496][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.062178][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.071207][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.081077][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.092415][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.103658][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.114068][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.128424][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.144202][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.156563][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.170950][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.207209][ T4186] device veth1_vlan entered promiscuous mode [ 68.253236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.265573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.274388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.283153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.295661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.305207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.315801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.326309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.335012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.347354][ T4190] device veth0_macvtap entered promiscuous mode [ 68.368259][ T4186] device veth0_macvtap entered promiscuous mode [ 68.384533][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.395685][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.408007][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.429944][ T4190] device veth1_macvtap entered promiscuous mode [ 68.449310][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.459112][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.474245][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.488572][ T4186] device veth1_macvtap entered promiscuous mode [ 68.506551][ T4192] device veth0_vlan entered promiscuous mode [ 68.533592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.543554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.553813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.562382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.588016][ T4192] device veth1_vlan entered promiscuous mode [ 68.612611][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.626667][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.638866][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.672975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.685500][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.698238][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.709375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.718933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.733056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.743913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.754307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.765432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.791344][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814441][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.829353][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.846737][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.889633][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.901631][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.913233][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.925867][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.938869][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.950341][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.962263][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970218][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 68.975204][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.979218][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 68.989618][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.991355][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.018075][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.029319][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.039801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.049920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.053514][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 69.062107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.069670][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 69.081144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.086280][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 69.097685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.111630][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.122661][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.132741][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.142016][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.186198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.195553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.224254][ T4192] device veth0_macvtap entered promiscuous mode [ 69.246810][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.255665][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.265056][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.281410][ T4192] device veth1_macvtap entered promiscuous mode [ 69.288840][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.298534][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.328093][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.345113][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.358318][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.371199][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.382946][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.395647][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.407487][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.435300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.445056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.454878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.469197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.502139][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.514277][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.524807][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.538710][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.552820][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.568588][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.582093][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.623245][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.652713][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.667721][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.676367][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.680429][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.704701][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.717595][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.729410][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.743215][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.764903][ T4193] device veth0_vlan entered promiscuous mode [ 69.772634][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.792017][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.809090][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.827377][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.835923][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.873180][ T4270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.911302][ T4193] device veth1_vlan entered promiscuous mode [ 69.950884][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.959627][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.984194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.999900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.014881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.047009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.058876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.079936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.089547][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.094608][ T4193] device veth0_macvtap entered promiscuous mode [ 70.116084][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.127075][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.141986][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.163085][ T4193] device veth1_macvtap entered promiscuous mode [ 70.172773][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.201822][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.205224][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.215599][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.245876][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.258143][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.287111][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.307025][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.317630][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.329965][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.342929][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.355318][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.369843][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.382693][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.395979][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.404376][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.425616][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.444220][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.492621][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.530050][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.590066][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.615192][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.634761][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.648473][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.671920][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.689454][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.719880][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.745558][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.755693][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.764929][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 70.894221][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.071249][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258184][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.447133][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 71.455705][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 71.463839][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 71.470283][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 71.472195][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.478289][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 71.493238][ T4230] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 71.502194][ T4230] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 71.514852][ T4230] usb 3-1: config 0 has no interface number 0 [ 71.532098][ T4230] usb 3-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.613704][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.622172][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.653332][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.680292][ T4230] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 71.682680][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.727046][ T4230] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 71.745760][ T4230] usb 3-1: Product: syz [ 71.755909][ T4230] usb 3-1: Manufacturer: syz [ 71.769588][ T4230] usb 3-1: config 0 descriptor?? [ 71.798955][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.805013][ T4272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.925112][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.960121][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.999052][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.016945][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.029666][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.065910][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.095606][ T4302] ======================================================= [ 72.095606][ T4302] WARNING: The mand mount option has been deprecated and [ 72.095606][ T4302] and is ignored by this kernel. Remove the mand [ 72.095606][ T4302] option from the mount to silence this warning. [ 72.095606][ T4302] ======================================================= [ 72.153748][ T4256] usb 3-1: USB disconnect, device number 2 [ 72.232131][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 72.247353][ T4308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 72.296048][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.665333][ T4323] device syzkaller0 entered promiscuous mode [ 73.416209][ T4323] tipc: Started in network mode [ 73.460054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.470043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.480032][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.490027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.500029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.510028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.520027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.530032][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.540042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.550034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.935678][ T4323] tipc: Node identity 46f5249d9665, cluster identity 4711 [ 74.962402][ T4323] tipc: Enabled bearer , priority 0 [ 75.031615][ T4202] Bluetooth: hci1: Unknown advertising packet type: 0xa00 [ 75.031767][ T4202] ================================================================== [ 75.046187][ T4323] tipc: Resetting bearer [ 75.052099][ T4202] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 75.052165][ T4202] Read of size 1 at addr ffff888076090c05 by task kworker/u5:6/4202 [ 75.052185][ T4202] [ 75.052193][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 75.091588][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.102446][ T4202] Workqueue: hci1 hci_rx_work [ 75.107197][ T4202] Call Trace: [ 75.110628][ T4202] [ 75.113674][ T4202] dump_stack_lvl+0x188/0x250 [ 75.118629][ T4202] ? show_regs_print_info+0x20/0x20 [ 75.124157][ T4202] ? load_image+0x410/0x410 [ 75.129054][ T4202] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 75.134721][ T4202] print_address_description+0x60/0x2d0 [ 75.140477][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 75.145687][ T4202] kasan_report+0xdf/0x130 [ 75.150380][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 75.155940][ T4202] hci_le_meta_evt+0x12ea/0x3ca0 [ 75.161098][ T4202] ? hci_event_packet+0x363/0x1310 [ 75.166306][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 75.171530][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 75.177812][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.184097][ T4202] ? mark_lock+0x94/0x320 [ 75.188719][ T4202] ? mutex_unlock+0x10/0x10 [ 75.193665][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.200040][ T4202] ? lock_chain_count+0x20/0x20 [ 75.205004][ T4202] ? __rwlock_init+0x140/0x140 [ 75.210656][ T4202] hci_event_packet+0xe0b/0x1310 [ 75.216174][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 75.221322][ T4202] ? rcu_lock_release+0x20/0x20 [ 75.229148][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.235608][ T4202] hci_rx_work+0x255/0xa10 [ 75.240691][ T4202] process_one_work+0x867/0xff0 [ 75.245853][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 75.252397][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 75.258060][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.263113][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.269563][ T4202] ? wq_worker_running+0x97/0x170 [ 75.275583][ T4202] worker_thread+0xad7/0x12a0 [ 75.281569][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 75.288654][ T4202] kthread+0x42e/0x520 [ 75.292961][ T4202] ? rcu_lock_release+0x20/0x20 [ 75.300042][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 75.306056][ T4202] ret_from_fork+0x1f/0x30 [ 75.311524][ T4202] [ 75.314680][ T4202] [ 75.317459][ T4202] Allocated by task 4342: [ 75.322517][ T4202] __kasan_kmalloc+0xaf/0xe0 [ 75.329082][ T4202] __alloc_skb+0x22c/0x750 [ 75.333703][ T4202] vhci_write+0xbd/0x440 [ 75.338133][ T4202] vfs_write+0x748/0xd70 [ 75.342505][ T4202] ksys_write+0x153/0x260 [ 75.347155][ T4202] do_syscall_64+0x4c/0xa0 [ 75.351673][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.358389][ T4202] [ 75.360782][ T4202] The buggy address belongs to the object at ffff888076090800 [ 75.360782][ T4202] which belongs to the cache kmalloc-1k of size 1024 [ 75.375946][ T4202] The buggy address is located 5 bytes to the right of [ 75.375946][ T4202] 1024-byte region [ffff888076090800, ffff888076090c00) [ 75.389759][ T4202] The buggy address belongs to the page: [ 75.395407][ T4202] page:ffffea0001d82400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76090 [ 75.405561][ T4202] head:ffffea0001d82400 order:3 compound_mapcount:0 compound_pincount:0 [ 75.414168][ T4202] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.422594][ T4202] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41dc0 [ 75.431575][ T4202] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 75.440999][ T4202] page dumped because: kasan: bad access detected [ 75.447616][ T4202] page_owner tracks the page as allocated [ 75.453775][ T4202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4273, ts 75019423181, free_ts 74888474141 [ 75.474729][ T4202] get_page_from_freelist+0x24f6/0x2670 [ 75.480461][ T4202] __alloc_pages+0x1ee/0x480 [ 75.485053][ T4202] new_slab+0xc0/0x4b0 [ 75.489147][ T4202] ___slab_alloc+0x807/0xdd0 [ 75.493738][ T4202] __kmalloc_node_track_caller+0x13d/0x3a0 [ 75.499545][ T4202] pskb_expand_head+0x128/0x1100 [ 75.504485][ T4202] batadv_skb_head_push+0x162/0x1f0 [ 75.509694][ T4202] batadv_send_skb_packet+0xf7/0x580 [ 75.515151][ T4202] batadv_iv_send_outstanding_bat_ogm_packet+0x657/0x800 [ 75.522274][ T4202] process_one_work+0x867/0xff0 [ 75.528265][ T4202] worker_thread+0xad7/0x12a0 [ 75.533035][ T4202] kthread+0x42e/0x520 [ 75.537105][ T4202] ret_from_fork+0x1f/0x30 [ 75.541645][ T4202] page last free stack trace: [ 75.546642][ T4202] free_unref_page_prepare+0x637/0x6c0 [ 75.552754][ T4202] free_unref_page+0x8f/0x2a0 [ 75.558111][ T4202] __unfreeze_partials+0x188/0x1e0 [ 75.563683][ T4202] put_cpu_partial+0x12d/0x190 [ 75.568895][ T4202] qlist_free_all+0x35/0x90 [ 75.574105][ T4202] kasan_quarantine_reduce+0x150/0x160 [ 75.580288][ T4202] __kasan_slab_alloc+0x2f/0xc0 [ 75.585409][ T4202] slab_post_alloc_hook+0x4c/0x380 [ 75.590902][ T4202] kmem_cache_alloc_node+0x184/0x2c0 [ 75.596253][ T4202] __alloc_skb+0xf4/0x750 [ 75.600592][ T4202] alloc_skb_with_frags+0xa7/0x720 [ 75.607821][ T4202] sock_alloc_send_pskb+0x87f/0x9a0 [ 75.613300][ T4202] unix_dgram_sendmsg+0x6f8/0x19c0 [ 75.618704][ T4202] sock_write_iter+0x2a6/0x3a0 [ 75.628681][ T4202] do_iter_readv_writev+0x47d/0x5f0 [ 75.635026][ T4202] do_iter_write+0x1f8/0x7a0 [ 75.639837][ T4202] [ 75.642255][ T4202] Memory state around the buggy address: [ 75.648320][ T4202] ffff888076090b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.656674][ T4202] ffff888076090b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.665457][ T4202] >ffff888076090c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.674066][ T4202] ^ [ 75.678179][ T4202] ffff888076090c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.686678][ T4202] ffff888076090d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.694823][ T4202] ================================================================== [ 75.703504][ T4202] Disabling lock debugging due to kernel taint [ 75.715687][ T4202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.723285][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 75.732329][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.742933][ T4202] Workqueue: hci1 hci_rx_work [ 75.747748][ T4202] Call Trace: [ 75.751415][ T4202] [ 75.754506][ T4202] dump_stack_lvl+0x188/0x250 [ 75.759714][ T4202] ? show_regs_print_info+0x20/0x20 [ 75.765280][ T4202] ? load_image+0x410/0x410 [ 75.769843][ T4202] panic+0x2f8/0x850 [ 75.774050][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 75.778775][ T4202] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 75.785387][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 75.791614][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 75.796886][ T4202] check_panic_on_warn+0x80/0xa0 [ 75.803303][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 75.809472][ T4202] end_report+0x6d/0xf0 [ 75.813801][ T4202] kasan_report+0x102/0x130 [ 75.818901][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 75.824585][ T4202] hci_le_meta_evt+0x12ea/0x3ca0 [ 75.830518][ T4202] ? hci_event_packet+0x363/0x1310 [ 75.836096][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 75.842173][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 75.848634][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.854300][ T4202] ? mark_lock+0x94/0x320 [ 75.858659][ T4202] ? mutex_unlock+0x10/0x10 [ 75.863447][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.869665][ T4202] ? lock_chain_count+0x20/0x20 [ 75.875040][ T4202] ? __rwlock_init+0x140/0x140 [ 75.880387][ T4202] hci_event_packet+0xe0b/0x1310 [ 75.886162][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 75.891249][ T4202] ? rcu_lock_release+0x20/0x20 [ 75.896427][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.902001][ T4202] hci_rx_work+0x255/0xa10 [ 75.906461][ T4202] process_one_work+0x867/0xff0 [ 75.911592][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 75.917670][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 75.923331][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.928851][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.934682][ T4202] ? wq_worker_running+0x97/0x170 [ 75.939822][ T4202] worker_thread+0xad7/0x12a0 [ 75.944667][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 75.950630][ T4202] kthread+0x42e/0x520 [ 75.954831][ T4202] ? rcu_lock_release+0x20/0x20 [ 75.959800][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 75.965612][ T4202] ret_from_fork+0x1f/0x30 [ 75.970415][ T4202] [ 75.973813][ T4202] Kernel Offset: disabled [ 75.978577][ T4202] Rebooting in 86400 seconds..