last executing test programs: 6.822727732s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c840, &(0x7f0000000700)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 6.511353837s ago: executing program 1 (id=11): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) 3.337254542s ago: executing program 4 (id=56): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x20, 0xe, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 3.290391716s ago: executing program 4 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e6574"], 0x60}}, 0x0) 3.290234756s ago: executing program 4 (id=58): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c0001556d0000000000000008000500", @ANYRES32=r1], 0x38}}, 0x0) 3.289623606s ago: executing program 4 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 833.765553ms ago: executing program 1 (id=60): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 811.648135ms ago: executing program 1 (id=61): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 811.435465ms ago: executing program 4 (id=62): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000001140)}], 0x1) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r3, 0x4, &(0x7f0000000180)={0xfffffffffffffffc, 0x10}, &(0x7f0000000300)) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4, &(0x7f0000000300), 0xfe, 0x57a, &(0x7f00000009c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 809.162175ms ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 625.94631ms ago: executing program 4 (id=69): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00'}, 0x18) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x1) 525.200288ms ago: executing program 2 (id=73): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010180)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x3, 0x2, 0x8001, 0x10}, {0x0, 0x55, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'erspan0\x00'}]}}]}, 0x88}}, 0x24040084) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 509.951279ms ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x880000, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x1}}}}]}, 0x86}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 282.529458ms ago: executing program 0 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 282.344158ms ago: executing program 3 (id=81): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe6a44975efd5106a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, 0x0, 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4, 0x2}, {0x2}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xffffffff) 281.508238ms ago: executing program 2 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = fsmount(0xffffffffffffffff, 0x0, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = gettid() tkill(r9, 0x15) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0xf3e, 0x6, 0xc9, 0x2, r9}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c0001556d0000000000000008000500", @ANYRES32=r12], 0x38}}, 0x0) 262.802239ms ago: executing program 0 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x1, '7'}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 262.460989ms ago: executing program 3 (id=84): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) 254.66214ms ago: executing program 2 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 184.082846ms ago: executing program 3 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 183.819295ms ago: executing program 3 (id=87): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000002480)="$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") sendmsg(0xffffffffffffffff, 0x0, 0x4000) truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 165.063057ms ago: executing program 2 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 139.888389ms ago: executing program 2 (id=89): r0 = gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 88.028443ms ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x9]}, 0x8, 0x80000) 87.827673ms ago: executing program 0 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 67.201795ms ago: executing program 3 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 44.560987ms ago: executing program 3 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x880000, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x1}}}}]}, 0x86}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=94): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. syzkaller login: [ 29.989456][ T4033] cgroup: Unknown subsys name 'net' [ 30.252323][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.512844][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.318851][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 31.345758][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 31.356294][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 31.384542][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.385662][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.387239][ T4043] device bridge_slave_0 entered promiscuous mode [ 31.390697][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.391802][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.393353][ T4043] device bridge_slave_1 entered promiscuous mode [ 31.394916][ T4053] chnl_net:caif_netlink_parms(): no params data found [ 31.412424][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.415195][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.416341][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.417790][ T4049] device bridge_slave_0 entered promiscuous mode [ 31.425824][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.432493][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433628][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.435099][ T4049] device bridge_slave_1 entered promiscuous mode [ 31.436545][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 31.442398][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.443547][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.445011][ T4044] device bridge_slave_0 entered promiscuous mode [ 31.455204][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.456303][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.457656][ T4044] device bridge_slave_1 entered promiscuous mode [ 31.465467][ T4043] team0: Port device team_slave_0 added [ 31.467234][ T4043] team0: Port device team_slave_1 added [ 31.478096][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.486242][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.492092][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.493153][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.494584][ T4053] device bridge_slave_0 entered promiscuous mode [ 31.496768][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.502463][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.503578][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.507822][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.510658][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.511706][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.515506][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.518508][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.523738][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.524787][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.526338][ T4053] device bridge_slave_1 entered promiscuous mode [ 31.535543][ T4049] team0: Port device team_slave_0 added [ 31.544650][ T4053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.549053][ T4049] team0: Port device team_slave_1 added [ 31.557630][ T4044] team0: Port device team_slave_0 added [ 31.559355][ T4053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.568384][ T4044] team0: Port device team_slave_1 added [ 31.572194][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.573322][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.574780][ T4054] device bridge_slave_0 entered promiscuous mode [ 31.589785][ T4053] team0: Port device team_slave_0 added [ 31.591150][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.592323][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.593865][ T4054] device bridge_slave_1 entered promiscuous mode [ 31.595441][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.596503][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.600710][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.650639][ T4043] device hsr_slave_0 entered promiscuous mode [ 31.689690][ T4043] device hsr_slave_1 entered promiscuous mode [ 31.743058][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.744085][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.747919][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.750818][ T4053] team0: Port device team_slave_1 added [ 31.751997][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.753060][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.757213][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.762443][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.763372][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.767204][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.784617][ T4053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.785698][ T4053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.790242][ T4053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.792980][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.795493][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.798499][ T4053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.799877][ T4053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.803864][ T4053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.850658][ T4049] device hsr_slave_0 entered promiscuous mode [ 31.889713][ T4049] device hsr_slave_1 entered promiscuous mode [ 31.929577][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.930832][ T4049] Cannot create hsr debugfs directory [ 31.943169][ T4054] team0: Port device team_slave_0 added [ 32.000543][ T4044] device hsr_slave_0 entered promiscuous mode [ 32.039774][ T4044] device hsr_slave_1 entered promiscuous mode [ 32.079638][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.080765][ T4044] Cannot create hsr debugfs directory [ 32.085205][ T4054] team0: Port device team_slave_1 added [ 32.150539][ T4053] device hsr_slave_0 entered promiscuous mode [ 32.199700][ T4053] device hsr_slave_1 entered promiscuous mode [ 32.249635][ T4053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.250747][ T4053] Cannot create hsr debugfs directory [ 32.255580][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.256652][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.260617][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.268006][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.269092][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.273437][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.380479][ T4054] device hsr_slave_0 entered promiscuous mode [ 32.422678][ T4054] device hsr_slave_1 entered promiscuous mode [ 32.459549][ T4054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.460702][ T4054] Cannot create hsr debugfs directory [ 32.507286][ T4043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.543172][ T4043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.595600][ T4043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.630684][ T4043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.689800][ T4049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.751847][ T4049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.794355][ T4044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.840914][ T4049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.890606][ T4049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.933724][ T4044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.980671][ T4044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.030493][ T4044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.107622][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.115661][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.121467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.123298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.124707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.126135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.127764][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.128851][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.130583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.132090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.133601][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.134694][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.136594][ T4053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.163721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.165196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.166719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.168518][ T4053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.210711][ T4053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.219902][ T4115] Bluetooth: hci2: command 0x0409 tx timeout [ 33.220081][ T4092] Bluetooth: hci4: command 0x0409 tx timeout [ 33.220955][ T4115] Bluetooth: hci1: command 0x0409 tx timeout [ 33.221902][ T4092] Bluetooth: hci3: command 0x0409 tx timeout [ 33.222823][ T4115] Bluetooth: hci0: command 0x0409 tx timeout [ 33.250608][ T4053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.301011][ T4054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.340705][ T4054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.390745][ T4054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.450215][ T4054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.486678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.488538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.490553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.497763][ T4043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.499344][ T4043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.505661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.507285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.509162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.510792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.512291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.513661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.514994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.547448][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.563853][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.565427][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.572519][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.586475][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.588118][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.589435][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.590664][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.592767][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.593916][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.595162][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.599077][ T4053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.603488][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.604965][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.606406][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.607548][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.608923][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.610756][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.614050][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.618071][ T4053] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.628634][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.630572][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.634105][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.635868][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.637557][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.643122][ T4049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.644784][ T4049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.650606][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.651764][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.653379][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.654962][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.656458][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.658283][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.660448][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.661983][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.663472][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.664891][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.665963][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.667168][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.668410][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.675054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.676679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.678169][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.679282][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.681206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.682789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.685949][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.694014][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.695587][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.696878][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.698268][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.701933][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.703468][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.706361][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.715626][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.717249][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.718719][ T1686] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.719863][ T1686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.722339][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.723911][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.725244][ T1686] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.726335][ T1686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.727569][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.729055][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.736236][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.737682][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.739217][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.744133][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.745884][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.747547][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.752264][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.756580][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.758290][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.760133][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.761670][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.763094][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.764480][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.765966][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.767326][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.777014][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.778501][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.782197][ T4043] device veth0_vlan entered promiscuous mode [ 33.783870][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.785362][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.786766][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.788240][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.790034][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.791392][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.794885][ T4053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.800662][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.804028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.805433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.806826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.808018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.815799][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.819013][ T4043] device veth1_vlan entered promiscuous mode [ 33.825290][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.837895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.839403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.841611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.843200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.845078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.846611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.848057][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.849083][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.856895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.858436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.862171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.863703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.865052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.871699][ T4053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.879811][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.881145][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.882374][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.884347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.885828][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.886961][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.895088][ T4049] device veth0_vlan entered promiscuous mode [ 33.898758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.900512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.901897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.905605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.906799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.908336][ T4043] device veth0_macvtap entered promiscuous mode [ 33.912312][ T4049] device veth1_vlan entered promiscuous mode [ 33.916801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.918178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.920411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.922062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.923591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.927404][ T4043] device veth1_macvtap entered promiscuous mode [ 33.933588][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.935493][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.938117][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.939769][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.941557][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.942996][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.944461][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.946846][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.950430][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.956147][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.957680][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.959064][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.961294][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.963124][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.968569][ T4049] device veth0_macvtap entered promiscuous mode [ 33.970793][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.972435][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.973837][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.975443][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.976961][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.980525][ T4054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.982479][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.985314][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.986709][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987990][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.989400][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.992869][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.994370][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.996319][ T4049] device veth1_macvtap entered promiscuous mode [ 34.009133][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.011448][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.013668][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.016890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.018209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.019651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.021207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.022697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.028273][ T4053] device veth0_vlan entered promiscuous mode [ 34.037925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.039733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.041305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.042559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.047394][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.048914][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.054735][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.056257][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.057686][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.059187][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.061454][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.062992][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.064283][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.066410][ T4044] device veth0_vlan entered promiscuous mode [ 34.069211][ T4053] device veth1_vlan entered promiscuous mode [ 34.074748][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.076113][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.077295][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.081444][ T4049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.082850][ T4049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.084285][ T4049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.085773][ T4049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.097178][ T4044] device veth1_vlan entered promiscuous mode [ 34.112351][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.130713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.132187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.133424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.134820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.136291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.141224][ T4053] device veth0_macvtap entered promiscuous mode [ 34.144194][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.145732][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.147344][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.157246][ T4044] device veth0_macvtap entered promiscuous mode [ 34.160261][ T4053] device veth1_macvtap entered promiscuous mode [ 34.162711][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.163985][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.164827][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.166409][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.167795][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.169220][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.175159][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.177592][ T4044] device veth1_macvtap entered promiscuous mode [ 34.182075][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.183645][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.185889][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.187296][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.188733][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.191717][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.193753][ T1686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.194365][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.195051][ T1686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.196707][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.198994][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.201966][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.203931][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.210236][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.211769][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.213231][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.225805][ T4053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.227127][ T4053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.228451][ T4053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.232825][ T4053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.236582][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.238224][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.238585][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.239574][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.239864][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.241483][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.242192][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.243462][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.247572][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.249225][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.252149][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.256410][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.257762][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.259129][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.261537][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.264374][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.266026][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.267609][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.269228][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.271802][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.273385][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.275385][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.277544][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.279105][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.290437][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.291945][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.314258][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.315746][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.325604][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.327024][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.344769][ T1686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.346055][ T1686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.348708][ T26] audit: type=1326 audit(34.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 34.355881][ T26] audit: type=1326 audit(34.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 34.360392][ T26] audit: type=1326 audit(34.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=95 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 34.363459][ T26] audit: type=1326 audit(34.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 34.365277][ T4054] device veth0_vlan entered promiscuous mode [ 34.368738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.370551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.372032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.373264][ T26] audit: type=1326 audit(34.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 34.373885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.377715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.385735][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.387190][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.388649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.408699][ T1686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.410250][ T1686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.411878][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.425001][ T4054] device veth1_vlan entered promiscuous mode [ 34.440769][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.441987][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.443359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.446918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.450123][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.455006][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.460156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.462548][ T4054] device veth0_macvtap entered promiscuous mode [ 34.464803][ T4054] device veth1_macvtap entered promiscuous mode [ 34.470226][ T4170] Zero length message leads to an empty skb [ 34.484322][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.486398][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.488093][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.490649][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.492239][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.493903][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.495536][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.497229][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.504100][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.505984][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.507386][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.508715][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.511480][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.534576][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.536151][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.537718][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.539361][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.542533][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.544197][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.545676][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.547254][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.549394][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.555843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.557515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.562618][ T4054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.564753][ T4173] loop1: detected capacity change from 0 to 512 [ 34.565326][ T4054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.569429][ T4054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.573624][ T4054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.595259][ T4173] ======================================================= [ 34.595259][ T4173] WARNING: The mand mount option has been deprecated and [ 34.595259][ T4173] and is ignored by this kernel. Remove the mand [ 34.595259][ T4173] option from the mount to silence this warning. [ 34.595259][ T4173] ======================================================= [ 34.620943][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.622174][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.624447][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.636624][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.638439][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.641225][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.643579][ T4173] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 34.645023][ T4173] System zones: 0-2, 18-18, 34-34 [ 34.666514][ T4173] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 34.678488][ T4173] Quota error (device loop1): write_blk: dquota write failed [ 34.682351][ T4173] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 34.687232][ T4173] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.2: Failed to acquire dquot type 1 [ 34.718208][ T4173] EXT4-fs (loop1): 1 truncate cleaned up [ 34.725882][ T4173] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 34.794854][ T4173] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 35.299665][ T4099] Bluetooth: hci1: command 0x041b tx timeout [ 35.311300][ T4201] loop0: detected capacity change from 0 to 2048 [ 35.312753][ T4175] Bluetooth: hci0: command 0x041b tx timeout [ 35.314104][ T4175] Bluetooth: hci3: command 0x041b tx timeout [ 35.315187][ T4175] Bluetooth: hci4: command 0x041b tx timeout [ 35.316109][ T4175] Bluetooth: hci2: command 0x041b tx timeout [ 35.735700][ T3338] cfg80211: failed to load regulatory.db [ 35.797395][ T4201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.844419][ T4210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.087830][ T4234] device syzkaller0 entered promiscuous mode [ 36.179150][ T4242] atomic_op 000000008440aaa1 conn xmit_atomic 0000000000000000 [ 36.871018][ T4231] Set syz1 is full, maxelem 65536 reached [ 36.905798][ T4251] process 'syz.3.39' launched './file1' with NULL argv: empty string added [ 37.080166][ T4260] atomic_op 00000000f4ff414d conn xmit_atomic 0000000000000000 [ 37.098397][ T26] audit: type=1326 audit(37.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 37.107247][ T26] audit: type=1326 audit(37.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 37.114150][ T26] audit: type=1326 audit(37.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4263 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ff20a8 code=0x7ffc0000 [ 37.264762][ T4275] loop4: detected capacity change from 0 to 128 [ 37.273025][ T4275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 37.274377][ T4275] System zones: 1-3, 19-19, 35-36 [ 37.275883][ T4275] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 37.342012][ T4283] loop4: detected capacity change from 0 to 1024 [ 37.383541][ T4283] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,abort,nodioread_nolock,data_err=abort,init_itable,nodelalloc,,errors=continue. Quota mode: none. [ 37.391339][ T4133] Bluetooth: hci2: command 0x040f tx timeout [ 37.392415][ T4133] Bluetooth: hci4: command 0x040f tx timeout [ 37.393561][ T4133] Bluetooth: hci3: command 0x040f tx timeout [ 37.396413][ T4133] Bluetooth: hci0: command 0x040f tx timeout [ 37.397443][ T4133] Bluetooth: hci1: command 0x040f tx timeout [ 37.697734][ T4303] loop4: detected capacity change from 0 to 1024 [ 37.700985][ T4303] EXT4-fs (loop4): Ignoring removed bh option [ 37.702014][ T4303] EXT4-fs (loop4): inline encryption not supported [ 37.704305][ T4303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 37.707345][ T4303] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.50: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.713423][ T4303] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.50: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.715797][ T4303] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.50: Failed to acquire dquot type 0 [ 37.717862][ T4303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 37.720108][ T4303] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.50: mark_inode_dirty error [ 37.722274][ T4303] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 37.724026][ T4303] EXT4-fs (loop4): 1 orphan inode deleted [ 37.724927][ T4303] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 37.730377][ T264] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.733107][ T264] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:3: Failed to release dquot type 0 [ 37.742063][ T4303] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.50: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.876554][ T4311] loop4: detected capacity change from 0 to 512 [ 37.903357][ T4311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.53: bg 0: block 248: padding at end of block bitmap is not set [ 37.906347][ T4311] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.53: Failed to acquire dquot type 1 [ 37.909442][ T4311] EXT4-fs (loop4): 1 truncate cleaned up [ 37.910617][ T4311] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.012012][ T4319] vhci_hcd: invalid port number 96 [ 38.012865][ T4319] vhci_hcd: default hub control req: 200e vfffa i0060 l0 [ 39.470995][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 39.472005][ T4175] Bluetooth: hci0: command 0x0419 tx timeout [ 39.472959][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 39.473855][ T4175] Bluetooth: hci4: command 0x0419 tx timeout [ 39.474768][ T4122] Bluetooth: hci2: command 0x0419 tx timeout [ 39.797253][ T4210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.299458][ T4210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.356800][ T4210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.487575][ T4210] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.491145][ T4210] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.494109][ T4210] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497043][ T4210] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.571415][ T4339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.613997][ T4333] loop4: detected capacity change from 0 to 1024 [ 40.653646][ T4339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.680815][ T4333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.685462][ T4333] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz.4.62: empty directory 'file1' has too many links (111) [ 40.754106][ T4357] loop3: detected capacity change from 0 to 164 [ 40.770058][ T4339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.778260][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 40.778266][ T26] audit: type=1326 audit(40.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.782900][ T26] audit: type=1326 audit(40.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.786387][ T26] audit: type=1326 audit(40.760:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.789806][ T26] audit: type=1326 audit(40.760:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.793178][ T26] audit: type=1326 audit(40.760:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.796713][ T26] audit: type=1326 audit(40.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.810881][ T26] audit: type=1326 audit(40.760:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.814010][ T26] audit: type=1326 audit(40.760:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.816462][ T4363] netlink: 104 bytes leftover after parsing attributes in process `syz.2.73'. [ 40.827511][ T4339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.833046][ T26] audit: type=1326 audit(40.760:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.836109][ T26] audit: type=1326 audit(40.760:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c0b10a8 code=0x7ffc0000 [ 40.893298][ T4368] netlink: 196 bytes leftover after parsing attributes in process `syz.3.74'. [ 40.896011][ T4369] device syzkaller0 entered promiscuous mode [ 40.975029][ T4339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.978169][ T4339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.991031][ T4339] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.005969][ T4339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.025706][ T4359] udc-core: couldn't find an available UDC or it's busy [ 41.026895][ T4359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.095030][ T4392] netlink: 332 bytes leftover after parsing attributes in process `syz.2.85'. [ 41.103163][ T4389] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET) [ 41.125887][ T4395] loop3: detected capacity change from 0 to 512 [ 41.143791][ T4395] EXT4-fs (loop3): error: journal path ./bus is not a block device [ 41.205930][ T4397] loop3: detected capacity change from 0 to 8192 [ 41.236893][ T4397] attempt to access beyond end of device [ 41.236893][ T4397] loop3: rw=0, want=57848, limit=8192 [ 41.238931][ T4397] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.245926][ T4397] FAT-fs (loop3): Filesystem has been set read-only [ 41.252854][ T4397] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.254403][ T4397] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.258134][ T4406] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 41.285673][ T4406] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 41.310883][ T4412] loop0: detected capacity change from 0 to 512 [ 41.322612][ T4413] tipc: Enabling of bearer rejected, failed to enable media [ 41.324935][ T4413] device syzkaller0 entered promiscuous mode [ 41.350905][ T4412] EXT4-fs (loop0): Ignoring removed oldalloc option [ 41.355934][ T4412] ------------[ cut here ]------------ [ 41.356940][ T4412] WARNING: CPU: 0 PID: 4412 at mm/page_alloc.c:5449 __alloc_pages+0x2b4/0x470 [ 41.358248][ T4412] Modules linked in: [ 41.358893][ T4412] CPU: 0 PID: 4412 Comm: syz.0.94 Not tainted 5.15.189-syzkaller #0 [ 41.360108][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.361600][ T4412] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.362724][ T4412] pc : __alloc_pages+0x2b4/0x470 [ 41.363434][ T4412] lr : __alloc_pages+0xac/0x470 [ 41.364106][ T4412] sp : ffff80001fe76ee0 [ 41.364726][ T4412] x29: ffff80001fe76fa0 x28: dfff800000000000 x27: ffff80001fe76f00 [ 41.365811][ T4412] x26: 1fffe00019009a57 x25: dfff800000000000 x24: ffff700003fcede0 [ 41.367094][ T4412] x23: 0fb68000086eb9ac x22: 0000000000000000 x21: 0000000000040c40 [ 41.368367][ T4412] x20: 0000000000000000 x19: 000000000000000c x18: 0000000000000000 [ 41.369609][ T4412] x17: 0000000000000002 x16: ffff8000111bc798 x15: 00000000ffffffe4 [ 41.370906][ T4412] x14: 00000000ffff8000 x13: 0000000026563f3c x12: 0000000000000005 [ 41.372071][ T4412] x11: 1ffff00003fcede4 x10: 0000000000000000 x9 : 0000000000000000 [ 41.373235][ T4412] x8 : ffff80001fe76f48 x7 : 0000000000000000 x6 : 000000000000003f [ 41.374387][ T4412] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020 [ 41.375604][ T4412] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff80001fe76f20 [ 41.376745][ T4412] Call trace: [ 41.377234][ T4412] __alloc_pages+0x2b4/0x470 [ 41.377908][ T4412] kmalloc_large_node+0x78/0x154 [ 41.378630][ T4412] __kmalloc_node+0x324/0x520 [ 41.379297][ T4412] kvmalloc_node+0x14c/0x200 [ 41.380006][ T4412] ext4_expand_extra_isize_ea+0xad8/0x1504 [ 41.380931][ T4412] __ext4_expand_extra_isize+0x298/0x358 [ 41.381824][ T4412] __ext4_mark_inode_dirty+0x434/0x7b0 [ 41.382675][ T4412] ext4_evict_inode+0xb3c/0x11dc [ 41.383448][ T4412] evict+0x3c8/0x810 [ 41.384110][ T4412] iput+0x6c4/0x77c [ 41.384722][ T4412] ext4_process_orphan+0x240/0x2b4 [ 41.385575][ T4412] ext4_orphan_cleanup+0x888/0xf8c [ 41.386428][ T4412] ext4_fill_super+0x7a5c/0x812c [ 41.387197][ T4412] mount_bdev+0x264/0x358 [ 41.387899][ T4412] ext4_mount+0x44/0x58 [ 41.388605][ T4412] legacy_get_tree+0xd4/0x16c [ 41.389327][ T4412] vfs_get_tree+0x90/0x274 [ 41.390058][ T4412] do_new_mount+0x228/0x810 [ 41.390764][ T4412] path_mount+0x5b4/0x1000 [ 41.391464][ T4412] __arm64_sys_mount+0x514/0x5e4 [ 41.392285][ T4412] invoke_syscall+0x98/0x2b8 [ 41.392974][ T4412] el0_svc_common+0x138/0x258 [ 41.393661][ T4412] do_el0_svc+0x58/0x14c [ 41.394296][ T4412] el0_svc+0x78/0x1e0 [ 41.394893][ T4412] el0t_64_sync_handler+0xcc/0xe4 [ 41.395577][ T4412] el0t_64_sync+0x1a0/0x1a4 [ 41.396275][ T4412] irq event stamp: 2512 [ 41.396971][ T4412] hardirqs last enabled at (2511): [] kasan_quarantine_put+0xc4/0x204 [ 41.398575][ T4412] hardirqs last disabled at (2512): [] el1_dbg+0x24/0x80 [ 41.400046][ T4412] softirqs last enabled at (1580): [] local_bh_enable+0x10/0x34 [ 41.401637][ T4412] softirqs last disabled at (1578): [] local_bh_disable+0x10/0x34 [ 41.403107][ T4412] ---[ end trace 9900db522b1f3ad0 ]--- [ 41.406193][ T4412] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.408034][ T4412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.94: Parent and EA inode have the same ino 15 [ 41.414701][ T4412] EXT4-fs (loop0): 1 orphan inode deleted [ 41.415587][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,errors=continue,,errors=continue. Quota mode: none.