last executing test programs: 3m54.758985381s ago: executing program 2 (id=306): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c0003050000006a007000fddbdf2503"], 0x28}}, 0x4000080) 3m54.641952211s ago: executing program 2 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x25dfdbfc, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x0) 3m54.56871332s ago: executing program 2 (id=311): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) keyctl$get_security(0x11, r5, 0x0, 0x0) unshare(0x2c020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xbc}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m51.308723059s ago: executing program 2 (id=328): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580), 0x1, 0x14fe, &(0x7f00000015c0)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 3m51.047041108s ago: executing program 2 (id=333): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)='v', 0x1}], 0x1}}], 0x2, 0x4000080) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x62) 3m49.887085395s ago: executing program 2 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/209, 0xd1}], 0x1}, 0x42) 3m49.838214094s ago: executing program 32 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/209, 0xd1}], 0x1}, 0x42) 3m49.562474624s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 3m23.811599627s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 3m9.117324027s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 2m52.946110932s ago: executing program 4 (id=728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newspdinfo={0x24, 0x24, 0x3ff, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x4800) 2m52.883627903s ago: executing program 4 (id=729): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0xffff, @none, 0x4, 0x2}, 0xe) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) syz_emit_ethernet(0x166, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000001303afffe8000000000000000000000000000bbff0200000000000000000186009078000000000000000000000000181800540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e093952a8de576752356c2eb3523bd1cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb040aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d007430"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a80)='fdinfo\x00') fchdir(r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x8000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0xe49}}) 2m51.697992149s ago: executing program 4 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m51.653613308s ago: executing program 4 (id=738): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@nobh}, {@nombcache}, {@resuid}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0x5f2, &(0x7f0000001ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 2m51.486760278s ago: executing program 4 (id=742): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 2m50.113211773s ago: executing program 4 (id=751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) sendmsg$nl_xfrm(r0, 0x0, 0x4000000) 2m49.929254082s ago: executing program 33 (id=751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) sendmsg$nl_xfrm(r0, 0x0, 0x4000000) 2m47.794553885s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 2m20.484814703s ago: executing program 0 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2m18.716610007s ago: executing program 0 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m12.327444426s ago: executing program 1 (id=871): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) 2m12.206853506s ago: executing program 0 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2m12.206589226s ago: executing program 1 (id=874): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) 2m12.149893155s ago: executing program 1 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 2m12.072912545s ago: executing program 1 (id=878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m11.910973754s ago: executing program 1 (id=880): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 2m11.870811524s ago: executing program 0 (id=881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 2m11.748179673s ago: executing program 1 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.654759374s ago: executing program 0 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2m11.543856183s ago: executing program 0 (id=885): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m56.328021952s ago: executing program 34 (id=885): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1m56.282839352s ago: executing program 35 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.300422163s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 54.489245014s ago: executing program 8 (id=1064): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) fchdir(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 53.46580648s ago: executing program 8 (id=1065): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(0x0, 0x80000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x40, 0x0, 0x5}}, 0x14) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@multicast2, 0x4e24, 0x81, 0x4e24, 0x400, 0xa, 0x80, 0x0, 0x84}, {0x18800000, 0x6, 0xcdf, 0x4, 0x3, 0x81e0, 0xffff, 0x3}, {0x3, 0x10, 0x3, 0x719}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x3500, 0x0, 0x2, 0xfa, 0x8001, 0xffffffff, 0x4}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) 53.294999619s ago: executing program 8 (id=1067): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0xf, 0xffffff31, 0x50, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.227246069s ago: executing program 8 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000008178005dbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105100000000001d400200000000004704000001ed00000f030000000000001d440000000000006b0a02fe000000007203000000000000b50000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 50.716523891s ago: executing program 8 (id=1074): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) 49.422812076s ago: executing program 8 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 34.348152066s ago: executing program 36 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 11.407540698s ago: executing program 3 (id=231): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030000140000000000000000000000040003000000000000001000000000000000000000000000000000000000000003000600ff00000002004e20ac1e0001000000000000000004000400000000000000000000000000ffffffffffffffff00000000000000000200010000000000000108fd010000c0030005000000000002004e22e00000020000000000000000020013"], 0xa0}}, 0x0) 6.871104023s ago: executing program 6 (id=1205): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x11, 0x3, "029a81"}, 0x0, 0x0, 0x0, 0x0}) 6.787507033s ago: executing program 7 (id=1208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) 6.719837013s ago: executing program 9 (id=1107): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x80}, 'port1\x00', 0x29, 0x191c17, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x9}) 6.570650652s ago: executing program 9 (id=1211): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.541120612s ago: executing program 5 (id=1212): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file1'}, 0xb) r1 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000000440)=0x2, 0x72) 6.462958072s ago: executing program 5 (id=1213): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.462695292s ago: executing program 7 (id=1214): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 6.359264281s ago: executing program 5 (id=1215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 6.319130801s ago: executing program 7 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x20, 0x700, 0x3, 0x9, {{0x10, 0x4, 0x0, 0x39, 0x40, 0x65, 0x0, 0x2a, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xce, 0x3, 0x9, [{@empty, 0x2}, {@private=0xa010100, 0xffffffc0}, {@loopback, 0x200}]}, @lsrr={0x83, 0xb, 0x21, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast1]}, @noop, @end]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}]}], {0x14, 0x10}}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 6.195013711s ago: executing program 5 (id=1217): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x60, 0x5, 0xf7, 0x8, 0x46d, 0xa0e, 0xe2f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.194816481s ago: executing program 6 (id=1218): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@multicast2, 0x4e24, 0x81, 0x4e24, 0x400, 0xa, 0x80, 0x0, 0x84}, {0x18800000, 0x6, 0xcdf, 0x4, 0x3, 0x81e0, 0xffff, 0x3}, {0x3, 0x10, 0x3, 0x719}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x3500, 0x0, 0x2, 0xfa, 0x8001, 0xffffffff, 0x4}}, 0xe8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) 6.12131153s ago: executing program 6 (id=1219): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x130, 0x0) sendmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1f8) 6.01112487s ago: executing program 6 (id=1220): r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x10000004}) shutdown(r2, 0x0) 5.87073727s ago: executing program 6 (id=1221): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400805"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xc3, 0x28000, 0xe21c, 0x200000, 0xfd, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r9, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000180)={0x14, &(0x7f0000000500)={0x20, 0x9, 0x2, {0x2, 0x5}}, 0x0}, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x81, 0x1, "e7"}, &(0x7f0000000840)=ANY=[@ANYBLOB="fd8103000006000000"], &(0x7f0000000880)={0x20, 0x83, 0x1, 'e'}, &(0x7f00000008c0)={0x20, 0x84, 0x2, "fbe1"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "557a10"}}) syz_usb_control_io$uac1(r9, &(0x7f0000000400)={0x14, &(0x7f0000000100)={0x20, 0xa, 0x5, {0x5, 0x30, "5237ec"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "32925c71db4068e19b0061892dd9dc57a8904998a1ed820c2bad"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x40, 0x30, 0x53, "4ccbc61d720a6f632ee749273a0046d7a99a6a0a4d30ce18ef6c55cb0c11286e528d76f1bdcc87715013aec706d1c39e8c827c8c4a46e329a7439f45a77322e133148029198e3b8000ffc6ee5ffd68931ef1b5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x2, "19f1"}, &(0x7f0000000580)={0x20, 0x82, 0x1, "8d"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "7dae"}, &(0x7f0000000640)={0x20, 0x84, 0x3, '\x00X}'}, &(0x7f0000000680)={0x20, 0x85, 0x3, "9b5cfb"}}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x6, 0x5, 0x6}]}}, @qdisc_kind_options=@q_gred={{}, {0x0, 0x2, [@TCA_GRED_PARMS={0x0, 0x1, {0x6fac45a7, 0xb5, 0x6, 0x8, 0x8, 0x8001, 0x20000, 0x3, 0x62, 0x5, 0x12, 0x8, 0x5, 0x9, 0x7ff, 0xfffffffd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=@raw=[@generic={0x90, 0x9, 0xd, 0x0, 0x690}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x19, &(0x7f0000000200)=""/25, 0x41000, 0x1, '\x00', r7, 0x1c, r2, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1fe96, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0xe, 0x0, 0x3}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.657024289s ago: executing program 5 (id=1222): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="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", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) ppoll(&(0x7f0000000200)=[{r0, 0x2}], 0x1, &(0x7f0000000180), 0x0, 0x0) 5.589492698s ago: executing program 5 (id=1223): socket(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) gettid() setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000400)=0x802, 0x4) 225.77723ms ago: executing program 9 (id=1224): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc1205531, &(0x7f0000002680)=""/4104) 193.83369ms ago: executing program 7 (id=1225): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) listen(r2, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 122.81766ms ago: executing program 6 (id=1226): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x20441, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000140)={0x9, 0x100000001, 0xf, 0xb, 0x9, 0x81, 0x60a82359}, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 49.25301ms ago: executing program 7 (id=1227): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 0s ago: executing program 7 (id=1228): r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x4020400) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): [ T6381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.221699][ T6381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.223780][ T6381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.434513][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'. [ 152.445009][ T6701] team0: No ports can be present during mode change [ 153.283302][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.285403][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.362264][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.396812][ T6707] loop5: detected capacity change from 0 to 764 [ 153.418448][ T6707] Symlink component flag not implemented [ 153.422776][ T6707] Symlink component flag not implemented (101) [ 153.428809][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.436633][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.440967][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.536400][ T6711] netlink: 168 bytes leftover after parsing attributes in process `syz.4.707'. [ 153.756865][ T6723] loop4: detected capacity change from 0 to 512 [ 154.204718][ T6723] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 154.529565][ T6723] System zones: 0-2, 18-18, 34-34 [ 154.579313][ T6723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.713: bg 0: block 248: padding at end of block bitmap is not set [ 154.600788][ T6732] loop0: detected capacity change from 0 to 1024 [ 154.606829][ T6723] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.713: Failed to acquire dquot type 1 [ 154.638932][ T6732] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.656844][ T6723] EXT4-fs (loop4): 1 truncate cleaned up [ 154.658249][ T6723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.694794][ T6732] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 154.704581][ T6723] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.713: deleted inode referenced: 12 [ 154.708765][ T6732] JBD2: no valid journal superblock found [ 154.715600][ T6732] EXT4-fs (loop0): error loading journal [ 154.756241][ T6723] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.713: deleted inode referenced: 12 [ 154.793556][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.5.720'. [ 155.549907][ T4296] EXT4-fs (loop4): unmounting filesystem. [ 155.702773][ T6746] loop4: detected capacity change from 0 to 2048 [ 155.746515][ T6746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.786892][ T4296] EXT4-fs (loop4): unmounting filesystem. [ 155.808358][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 157.195094][ T6783] loop4: detected capacity change from 0 to 1024 [ 157.197127][ T6783] EXT4-fs: Ignoring removed nobh option [ 157.204826][ T6783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.304406][ T4296] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 64: comm syz-executor: path /164/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.315797][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.331080][ T4296] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 64: comm syz-executor: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.336729][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.338644][ T4296] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 64: comm syz-executor: path /164/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.346345][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.348273][ T4296] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 64: comm syz-executor: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.359043][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.361650][ T4296] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 64: comm syz-executor: path /164/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.367693][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.375843][ T4296] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 64: comm syz-executor: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.381238][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.383103][ T4296] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 64: comm syz-executor: path /164/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.388532][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.409936][ T4296] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 64: comm syz-executor: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.416275][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.418147][ T4296] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 64: comm syz-executor: path /164/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.426038][ T4296] EXT4-fs (loop4): Remounting filesystem read-only [ 157.428031][ T4296] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 64: comm syz-executor: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 157.599934][ T6799] loop5: detected capacity change from 0 to 4096 [ 157.697631][ T6799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 157.723839][ T5449] EXT4-fs (loop5): unmounting filesystem. [ 158.524724][ T6806] loop5: detected capacity change from 0 to 512 [ 158.548318][ T6806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.566892][ T6806] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.591621][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 158.612201][ T5449] EXT4-fs (loop5): unmounting filesystem. [ 158.654805][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 159.044118][ T4558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.093131][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.097901][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.100911][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.103358][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.105688][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.107780][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.123083][ T6829] netlink: 'syz.5.759': attribute type 3 has an invalid length. [ 159.572693][ T4558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.662500][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.664727][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.696734][ T4558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.861187][ T4558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.868637][ T6827] chnl_net:caif_netlink_parms(): no params data found [ 160.729795][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.732016][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.734736][ T6827] device bridge_slave_0 entered promiscuous mode [ 160.738427][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.741080][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.743706][ T6827] device bridge_slave_1 entered promiscuous mode [ 160.764574][ T6827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.769633][ T6827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.819685][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 160.855197][ T6827] team0: Port device team_slave_0 added [ 160.872088][ T6827] team0: Port device team_slave_1 added [ 160.925791][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.930967][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.952486][ T6870] loop0: detected capacity change from 0 to 1024 [ 160.954307][ T6827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.965768][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.967480][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.984320][ T6827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.989530][ T6870] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.992873][ T6870] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.999174][ T6870] JBD2: no valid journal superblock found [ 161.000779][ T6870] EXT4-fs (loop0): error loading journal [ 161.129390][ T4302] Bluetooth: hci0: command 0x0409 tx timeout [ 161.137175][ T6827] device hsr_slave_0 entered promiscuous mode [ 161.154015][ T6870] input: syz0 as /devices/virtual/input/input5 [ 161.180134][ T6827] device hsr_slave_1 entered promiscuous mode [ 161.229165][ T6827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.232001][ T6827] Cannot create hsr debugfs directory [ 161.503205][ T6827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.521034][ T6827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.602995][ T6827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.693253][ T6827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.975514][ T4302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.981486][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.984562][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.987207][ T4302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.990669][ T4302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.992812][ T4302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.137371][ T6894] loop0: detected capacity change from 0 to 32768 [ 162.284245][ T6827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.401667][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.404467][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.411416][ T6827] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.443297][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.445996][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.451210][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.453037][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.455370][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.465975][ T6913] loop0: detected capacity change from 0 to 64 [ 162.851547][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.854468][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.863450][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.865325][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.887665][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.892276][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.895005][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.899633][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.902335][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.000386][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.003446][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.008857][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.026042][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.062631][ T6928] loop0: detected capacity change from 0 to 4096 [ 163.066350][ T6928] ntfs3: Unknown parameter 'windows_names' [ 163.126648][ T6228] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.209283][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 163.314952][ T6939] loop0: detected capacity change from 0 to 4096 [ 163.337202][ T6939] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 163.464078][ T6827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.469747][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.477915][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.481235][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.501510][ T6919] loop5: detected capacity change from 0 to 40427 [ 163.552476][ T6919] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 163.554501][ T6919] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 163.598767][ T6919] F2FS-fs (loop5): invalid crc value [ 163.627247][ T4558] device hsr_slave_0 left promiscuous mode [ 163.647660][ T6919] F2FS-fs (loop5): Found nat_bits in checkpoint [ 163.669515][ T4558] device hsr_slave_1 left promiscuous mode [ 163.696875][ T6919] F2FS-fs (loop5): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 163.703436][ T6919] F2FS-fs (loop5): Failed to read root inode [ 163.730106][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.732340][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.741720][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.743545][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.752598][ T4558] device bridge_slave_1 left promiscuous mode [ 163.754198][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.829470][ T4558] device bridge_slave_0 left promiscuous mode [ 163.831194][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.849220][ T4302] Bluetooth: hci3: command 0x0406 tx timeout [ 163.849291][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 163.949256][ T4558] device veth1_macvtap left promiscuous mode [ 163.950831][ T4558] device veth0_macvtap left promiscuous mode [ 163.953632][ T4558] device veth1_vlan left promiscuous mode [ 163.955149][ T4558] device veth0_vlan left promiscuous mode [ 164.009245][ T4302] Bluetooth: hci4: command 0x0409 tx timeout [ 164.442671][ T6967] loop5: detected capacity change from 0 to 32768 [ 164.471739][ T6967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.792 (6967) [ 164.506460][ T6967] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.509653][ T6967] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 164.512145][ T6967] BTRFS info (device loop5): setting nodatasum [ 164.513771][ T6967] BTRFS info (device loop5): force zlib compression, level 3 [ 164.515675][ T6967] BTRFS info (device loop5): metadata ratio 1 [ 164.517372][ T6967] BTRFS info (device loop5): enabling ssd optimizations [ 164.520580][ T6967] BTRFS info (device loop5): allowing degraded mounts [ 164.522426][ T6967] BTRFS info (device loop5): using free space tree [ 164.620423][ T5449] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.937119][ T6993] loop5: detected capacity change from 0 to 512 [ 164.965812][ T6993] EXT4-fs (loop5): Test dummy encryption mode enabled [ 164.967489][ T6993] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.979734][ T6993] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.795: bad orphan inode 131083 [ 164.983185][ T6993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.046551][ T5449] EXT4-fs (loop5): unmounting filesystem. [ 165.094876][ T6997] loop5: detected capacity change from 0 to 2048 [ 165.147321][ T6998] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.178456][ T6997] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 165.211188][ T6997] Remounting filesystem read-only [ 165.287936][ T7000] loop5: detected capacity change from 0 to 2048 [ 165.293680][ T7000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.299288][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 165.413700][ T7002] loop5: detected capacity change from 0 to 2048 [ 165.436365][ T7003] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.685271][ T7011] loop5: detected capacity change from 0 to 4096 [ 165.711881][ T7011] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 165.713752][ T7011] UDF-fs: Scanning with blocksize 512 failed [ 165.731972][ T7011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.023521][ T4558] team0 (unregistering): Port device team_slave_1 removed [ 166.100606][ T4302] Bluetooth: hci4: command 0x041b tx timeout [ 166.821503][ T4558] team0 (unregistering): Port device team_slave_0 removed [ 166.911554][ T7022] loop0: detected capacity change from 0 to 4096 [ 166.921717][ T7022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.943963][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 166.988470][ T4558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.171333][ T4558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.197733][ T7027] loop0: detected capacity change from 0 to 32768 [ 167.202598][ T7027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.807 (7027) [ 167.207908][ T7027] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.219119][ T7027] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 167.222126][ T7027] BTRFS info (device loop0): using free space tree [ 167.248159][ T7027] BTRFS info (device loop0): enabling ssd optimizations [ 167.296480][ T4308] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.369213][ T4299] Bluetooth: hci0: command 0x0419 tx timeout [ 168.169580][ T4302] Bluetooth: hci4: command 0x040f tx timeout [ 169.544409][ T4558] bond0 (unregistering): Released all slaves [ 169.725878][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 169.968130][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.976974][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.987323][ T6902] device bridge_slave_0 entered promiscuous mode [ 170.005713][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.007650][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.032781][ T6827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.049626][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.057430][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.071521][ T6902] device bridge_slave_1 entered promiscuous mode [ 170.178747][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.188372][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.217649][ T7089] loop5: detected capacity change from 0 to 512 [ 170.232484][ T6902] team0: Port device team_slave_0 added [ 170.235527][ T6902] team0: Port device team_slave_1 added [ 170.249039][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 170.290185][ T7089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 170.292391][ T7089] System zones: 0-2, 18-18, 34-34 [ 170.314292][ T7089] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.816: bg 0: block 248: padding at end of block bitmap is not set [ 170.315465][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.321811][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.328379][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.333006][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.334750][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.341832][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.351759][ T7089] __quota_error: 101 callbacks suppressed [ 170.351771][ T7089] Quota error (device loop5): write_blk: dquota write failed [ 170.355373][ T7089] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.358070][ T7089] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.816: Failed to acquire dquot type 1 [ 170.380775][ T7089] EXT4-fs (loop5): 1 truncate cleaned up [ 170.386841][ T7089] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.400905][ T6902] device hsr_slave_0 entered promiscuous mode [ 170.449356][ T6902] device hsr_slave_1 entered promiscuous mode [ 170.479403][ T6902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.481247][ T6902] Cannot create hsr debugfs directory [ 170.481700][ T7089] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.816: deleted inode referenced: 12 [ 170.491136][ T7089] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.816: deleted inode referenced: 12 [ 170.535870][ T5449] EXT4-fs (loop5): unmounting filesystem. [ 170.553904][ T7080] loop0: detected capacity change from 0 to 32768 [ 170.571841][ T7080] XFS: ikeep mount option is deprecated. [ 170.612905][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.615599][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.665790][ T7080] XFS (loop0): Mounting V5 Filesystem [ 170.764202][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.776016][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.792294][ T7080] XFS (loop0): Ending clean mount [ 170.796291][ T6827] device veth0_vlan entered promiscuous mode [ 170.823666][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.826110][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.844575][ T7080] XFS (loop0): Quotacheck needed: Please wait. [ 170.931195][ T7080] XFS (loop0): Quotacheck: Done. [ 171.288701][ T4308] XFS (loop0): Unmounting Filesystem [ 183.035354][ T6827] device veth1_vlan entered promiscuous mode [ 183.417690][ T6902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.224907][ T6902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.322549][ T6902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.479570][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.482086][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.551286][ T6902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.615042][ T6827] device veth0_macvtap entered promiscuous mode [ 184.633420][ T6827] device veth1_macvtap entered promiscuous mode [ 184.670253][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.672873][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.674899][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.677357][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.699574][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.702364][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.704946][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.717858][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.722868][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.911342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.913953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.924773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.928696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.943006][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.948150][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.952284][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.999176][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.003219][ T6827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.044328][ T6827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.698030][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.803613][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.806475][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.819099][ T6827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.821287][ T6827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.823617][ T6827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.825914][ T6827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.359322][ T6902] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.371008][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372636][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.391187][ T6902] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.110472][ T1695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.112592][ T1695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.117680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.246295][ T6902] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.381760][ T6902] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.449755][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.451945][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.458269][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.002031][ T7279] device pim6reg1 entered promiscuous mode [ 190.072891][ T7289] loop6: detected capacity change from 0 to 16 [ 190.102426][ T7289] erofs: (device loop6): mounted with root inode @ nid 36. [ 190.152832][ T4558] device hsr_slave_0 left promiscuous mode [ 190.189679][ T4558] device hsr_slave_1 left promiscuous mode [ 190.236399][ T4302] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 190.259528][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.261516][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.285280][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.287239][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.296223][ T4558] device bridge_slave_1 left promiscuous mode [ 190.297846][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.347014][ T4558] device bridge_slave_0 left promiscuous mode [ 190.348858][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.510153][ T4558] device veth1_macvtap left promiscuous mode [ 190.511716][ T4558] device veth0_macvtap left promiscuous mode [ 190.513182][ T4558] device veth1_vlan left promiscuous mode [ 190.514486][ T4558] device veth0_vlan left promiscuous mode [ 193.093133][ T4558] team0 (unregistering): Port device team_slave_1 removed [ 193.292984][ T4558] team0 (unregistering): Port device team_slave_0 removed [ 193.470730][ T4558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.691418][ T4558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.174760][ T4558] bond0 (unregistering): Released all slaves [ 196.398253][ T7302] device pim6reg1 entered promiscuous mode [ 196.534576][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.543638][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.581882][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.584416][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.586885][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.635563][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.645595][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.647351][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.669416][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.673567][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.679633][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.681448][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.683611][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.711563][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.714158][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.734371][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.742976][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.748626][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.758440][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.761656][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.776849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.777286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.777774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.780350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.826313][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.087544][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.102483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.104502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.165006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.167745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.290001][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.292697][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.302435][ T6902] device veth0_vlan entered promiscuous mode [ 197.320337][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.322633][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.412298][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.414608][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.691079][ T27] audit: type=1326 audit(208.670:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 208.697175][ T27] audit: type=1326 audit(208.670:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 208.705058][ T27] audit: type=1326 audit(208.670:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb0b57f94 code=0x7ffc0000 [ 208.711628][ T27] audit: type=1326 audit(208.670:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 208.717561][ T27] audit: type=1326 audit(208.670:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 208.724042][ T27] audit: type=1326 audit(208.670:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 208.730211][ T27] audit: type=1326 audit(208.670:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb0b5836c code=0x7ffc0000 [ 208.735718][ T27] audit: type=1326 audit(208.670:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 208.749020][ T27] audit: type=1326 audit(208.670:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 208.761711][ T27] audit: type=1326 audit(208.670:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.6.888" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 212.622165][ T4299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.626541][ T4299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.630120][ T4299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.632628][ T4299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.635608][ T4299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.637650][ T4299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.643919][ T4302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.654550][ T4302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.657515][ T4299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.666053][ T4299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.669617][ T4299] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.671617][ T4299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.729215][ T4299] Bluetooth: hci6: command 0x0409 tx timeout [ 214.729247][ T4314] Bluetooth: hci5: command 0x0409 tx timeout [ 216.809399][ T4314] Bluetooth: hci6: command 0x041b tx timeout [ 216.819563][ T4314] Bluetooth: hci5: command 0x041b tx timeout [ 218.889262][ T4314] Bluetooth: hci5: command 0x040f tx timeout [ 218.889280][ T4302] Bluetooth: hci6: command 0x040f tx timeout [ 219.679744][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.890'. [ 219.691474][ T6902] device veth1_vlan entered promiscuous mode [ 219.797018][ T6902] device veth0_macvtap entered promiscuous mode [ 219.836610][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.845357][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.848020][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.888620][ T6902] device veth1_macvtap entered promiscuous mode [ 219.992158][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.994770][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.035287][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.059729][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.062358][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.064984][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.067450][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.070097][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.073830][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.093709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.096197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.104823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.833048][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.835785][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.854912][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.857559][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.860589][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.863218][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.881696][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.979133][ T4302] Bluetooth: hci5: command 0x0419 tx timeout [ 220.980779][ T4302] Bluetooth: hci6: command 0x0419 tx timeout [ 220.980997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.989911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.008595][ T6902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.059522][ T6902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.062229][ T6902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.065018][ T6902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.080447][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 221.080461][ T27] audit: type=1326 audit(221.060:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.090610][ T27] audit: type=1326 audit(221.070:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb0b57f94 code=0x7ffc0000 [ 221.103110][ T27] audit: type=1326 audit(221.070:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 221.110785][ T7448] netlink: 168 bytes leftover after parsing attributes in process `syz.6.899'. [ 221.113911][ T27] audit: type=1326 audit(221.070:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.119528][ T27] audit: type=1326 audit(221.070:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 221.124966][ T27] audit: type=1326 audit(221.070:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb0b5836c code=0x7ffc0000 [ 221.139291][ T27] audit: type=1326 audit(221.070:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.149405][ T27] audit: type=1326 audit(221.070:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.159691][ T27] audit: type=1326 audit(221.070:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.179301][ T27] audit: type=1326 audit(221.070:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 221.308618][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.311721][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.708843][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.711571][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.725559][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.769500][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.771640][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.825395][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.860331][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.904'. [ 221.882514][ T7410] chnl_net:caif_netlink_parms(): no params data found [ 221.971450][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 222.065679][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.067425][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.073352][ T7410] device bridge_slave_0 entered promiscuous mode [ 222.104217][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.106333][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.109604][ T7412] device bridge_slave_0 entered promiscuous mode [ 222.113509][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.115582][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.118138][ T7412] device bridge_slave_1 entered promiscuous mode [ 222.123963][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.126134][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.128543][ T7410] device bridge_slave_1 entered promiscuous mode [ 222.203806][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.331007][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.392407][ T7410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.396917][ T7410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.434332][ T7412] team0: Port device team_slave_0 added [ 222.455730][ T7412] team0: Port device team_slave_1 added [ 222.480986][ T7410] team0: Port device team_slave_0 added [ 222.611480][ T7410] team0: Port device team_slave_1 added [ 222.876146][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.031905][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.120869][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.395849][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.401368][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.431998][ T4302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.437894][ T4302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.441258][ T4302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.444483][ T4302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.447084][ T4302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.450739][ T4302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.496297][ T7410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.520891][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.522712][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.539407][ T7410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.563040][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.569180][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.575154][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.633415][ T7410] device hsr_slave_0 entered promiscuous mode [ 223.679455][ T7410] device hsr_slave_1 entered promiscuous mode [ 223.719302][ T7410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.721448][ T7410] Cannot create hsr debugfs directory [ 223.844944][ T7508] netlink: 168 bytes leftover after parsing attributes in process `syz.5.908'. [ 224.261268][ T7412] device hsr_slave_0 entered promiscuous mode [ 224.299386][ T7412] device hsr_slave_1 entered promiscuous mode [ 224.369169][ T7412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.371174][ T7412] Cannot create hsr debugfs directory [ 224.463395][ T5833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.478349][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.6.913'. [ 224.571847][ T5833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.799460][ T5833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.290294][ T4314] Bluetooth: hci2: command 0x0406 tx timeout [ 225.529137][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 225.592336][ T7410] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 225.712604][ T5833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.732045][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 225.735828][ T7410] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 225.755287][ T7535] netlink: 168 bytes leftover after parsing attributes in process `syz.6.918'. [ 225.771316][ T7410] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 225.855883][ T7410] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 225.878642][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.882089][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.925411][ T7544] netlink: 68 bytes leftover after parsing attributes in process `syz.5.922'. [ 226.169910][ T7412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.252665][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.256687][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.262390][ T7495] device bridge_slave_0 entered promiscuous mode [ 226.274434][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.276293][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.283894][ T7495] device bridge_slave_1 entered promiscuous mode [ 226.290023][ T7412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.778303][ T7412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 227.067809][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.078013][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.123585][ T7495] team0: Port device team_slave_0 added [ 227.129253][ T7495] team0: Port device team_slave_1 added [ 227.156670][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.158577][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.168421][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.180566][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.182253][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.187944][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.199935][ T7412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.412835][ T5833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.435446][ T7410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.542833][ T5833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.601028][ T7495] device hsr_slave_0 entered promiscuous mode [ 227.609299][ T4299] Bluetooth: hci1: command 0x041b tx timeout [ 227.630809][ T7495] device hsr_slave_1 entered promiscuous mode [ 227.679300][ T7495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.681100][ T7495] Cannot create hsr debugfs directory [ 227.762539][ T5833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.810325][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.814000][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.824224][ T7410] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.840974][ T7587] device veth1_macvtap left promiscuous mode [ 227.842666][ T7587] device macsec0 entered promiscuous mode [ 227.915415][ T5833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.936804][ T7589] team0: No ports can be present during mode change [ 227.957008][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.965390][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.967968][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.969941][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.999500][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.001983][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.004751][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.012572][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.014366][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.044681][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.096413][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.122568][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.126328][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.145693][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.168294][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.254444][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.257320][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.268780][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.278098][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.287968][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.295896][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.326789][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.394378][ T7495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.419023][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.423176][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.437972][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.461227][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.463845][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.466418][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.468177][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.490965][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.581490][ T7495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.609188][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.612913][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.627823][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.629785][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.642041][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.655232][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.022532][ T7495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.033010][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.040327][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.050250][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.080034][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.087129][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.213072][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.6.940'. [ 229.215900][ T7630] team0: No ports can be present during mode change [ 229.271891][ T7495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.294824][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.297450][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.300575][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.304150][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.460539][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.467123][ T7412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.484742][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.487479][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.576075][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.578395][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.690094][ T7410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.709881][ T4314] Bluetooth: hci1: command 0x040f tx timeout [ 230.077990][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.080648][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.225972][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.241527][ T7495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.443874][ T7495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.588881][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.951'. [ 230.597429][ T7495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.631253][ T7495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.661532][ T7703] team0: No ports can be present during mode change [ 230.793781][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.796591][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.868259][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.873084][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.875968][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.884297][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.911064][ T7410] device veth0_vlan entered promiscuous mode [ 231.198870][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.201509][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.233344][ T7410] device veth1_vlan entered promiscuous mode [ 231.306082][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.308686][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.311845][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.314369][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.321543][ T7412] device veth0_vlan entered promiscuous mode [ 231.604611][ T7412] device veth1_vlan entered promiscuous mode [ 231.655673][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.658343][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.670725][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.727180][ T7410] device veth0_macvtap entered promiscuous mode [ 231.780011][ T4299] Bluetooth: hci1: command 0x0419 tx timeout [ 243.074803][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.077460][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.092518][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.094966][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.126939][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.960'. [ 243.132269][ T7752] team0: No ports can be present during mode change [ 243.147107][ T7410] device veth1_macvtap entered promiscuous mode [ 243.165215][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.167690][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.179763][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.182319][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.184543][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.186861][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.210525][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.212914][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.215127][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.217474][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.240452][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.247805][ T7412] device veth0_macvtap entered promiscuous mode [ 243.554966][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.557563][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.560499][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.568099][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.571628][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.574272][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.577257][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.586159][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.588850][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.592825][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.597892][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.606729][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.620777][ T7767] device pim6reg1 entered promiscuous mode [ 243.626341][ T7412] device veth1_macvtap entered promiscuous mode [ 243.670372][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.672954][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.675625][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.688661][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.695536][ T7410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.698279][ T7410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.708637][ T7410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.725966][ T7410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.732125][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.734490][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.927768][ T5833] device hsr_slave_0 left promiscuous mode [ 243.971049][ T5833] device hsr_slave_1 left promiscuous mode [ 244.049849][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.051862][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.055129][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.057027][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.060163][ T5833] device bridge_slave_1 left promiscuous mode [ 244.061748][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.100460][ T5833] device bridge_slave_0 left promiscuous mode [ 244.102218][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.165135][ T5833] device hsr_slave_0 left promiscuous mode [ 244.199406][ T5833] device hsr_slave_1 left promiscuous mode [ 244.289143][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.291352][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.295198][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.297638][ T5833] device bridge_slave_1 left promiscuous mode [ 244.299471][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.349976][ T5833] device bridge_slave_0 left promiscuous mode [ 244.351903][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.452696][ T5833] device team0 left promiscuous mode [ 244.454133][ T5833] device team_slave_0 left promiscuous mode [ 244.455846][ T5833] device team_slave_1 left promiscuous mode [ 244.529219][ T5833] device veth1_macvtap left promiscuous mode [ 244.530964][ T5833] device veth0_macvtap left promiscuous mode [ 244.532662][ T5833] device veth1_vlan left promiscuous mode [ 244.534278][ T5833] device veth0_vlan left promiscuous mode [ 244.619262][ T5833] device veth1_macvtap left promiscuous mode [ 244.620958][ T5833] device veth0_macvtap left promiscuous mode [ 244.622694][ T5833] device veth1_vlan left promiscuous mode [ 244.624366][ T5833] device veth0_vlan left promiscuous mode [ 246.715204][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 246.912847][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 247.119742][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.330540][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.812261][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.813918][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.716981][ T5833] bond0 (unregistering): Released all slaves [ 251.753217][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 251.950725][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 252.160464][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.410003][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.886477][ T5833] bond0 (unregistering): Released all slaves [ 255.074283][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.077234][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.086330][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.969'. [ 255.088525][ T7791] team0: No ports can be present during mode change [ 255.098556][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.120520][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.123120][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.125454][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.127932][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.158039][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.169174][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.171671][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.174328][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.186221][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.204644][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.207272][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.241481][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.244193][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.246560][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.248426][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.266271][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.268816][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.285976][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.287758][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.298289][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.328134][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.331056][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.333488][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.335803][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.338163][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.347624][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.365623][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.368208][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.371393][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.375143][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.376901][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.377457][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.378898][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.394871][ T7412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.394941][ T7412] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.394963][ T7412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.394989][ T7412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.432822][ T7495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.435491][ T7495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.502350][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.505151][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.508281][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.529600][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.532454][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.547393][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.571542][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.583729][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.586240][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.598059][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.601126][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.603534][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.606688][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.619277][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.713569][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.717443][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.746627][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.771390][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.773911][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.797604][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.807884][ T1695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.814116][ T1695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.829619][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.845585][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.847705][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.856604][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.859900][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.867431][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.870583][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.887068][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.895641][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.952564][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.955155][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.971844][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.978701][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.013304][ T7495] device veth0_vlan entered promiscuous mode [ 256.042569][ T7495] device veth1_vlan entered promiscuous mode [ 256.079517][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.086123][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.125906][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.145387][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.170179][ T7495] device veth0_macvtap entered promiscuous mode [ 256.174408][ T7495] device veth1_macvtap entered promiscuous mode [ 256.216198][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.227501][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.236493][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.244057][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.261931][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.277376][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.287910][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.301312][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.313556][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.326390][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.372125][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.391015][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.393737][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.405771][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.795130][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.215826][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.218646][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.230091][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.232522][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.234547][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.237072][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.244144][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.246661][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.249979][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.259170][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.268017][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.274935][ T7495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.277063][ T7495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.279866][ T7495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.282241][ T7495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.295070][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.984'. [ 257.297581][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.301428][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.469824][ T5106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.472092][ T5106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.476612][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.481478][ T27] kauditd_printk_skb: 118 callbacks suppressed [ 257.481492][ T27] audit: type=1326 audit(257.460:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.488458][ T27] audit: type=1326 audit(257.460:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4557f94 code=0x7ffc0000 [ 257.514411][ T7870] netlink: 168 bytes leftover after parsing attributes in process `syz.8.986'. [ 257.519526][ T27] audit: type=1326 audit(257.460:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb455b5cc code=0x7ffc0000 [ 257.524945][ T27] audit: type=1326 audit(257.460:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.556314][ T5106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.559838][ T5106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.572598][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.577882][ T27] audit: type=1326 audit(257.460:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb455b5cc code=0x7ffc0000 [ 257.598488][ T27] audit: type=1326 audit(257.460:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb455836c code=0x7ffc0000 [ 257.606164][ T27] audit: type=1326 audit(257.460:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.629909][ T27] audit: type=1326 audit(257.460:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.677335][ T27] audit: type=1326 audit(257.460:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.700426][ T27] audit: type=1326 audit(257.460:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.8.986" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 257.786101][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.806757][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.239724][ T7933] netlink: 168 bytes leftover after parsing attributes in process `syz.5.999'. [ 261.539366][ T7938] random: crng reseeded on system resumption [ 262.106519][ T7940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.109381][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.111634][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.065031][ T7974] cifs: Unknown parameter 'mode' [ 263.795875][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.808312][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.812052][ T4299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.814646][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.817973][ T4299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.838523][ T4299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.853626][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 263.853642][ T27] audit: type=1326 audit(263.830:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.860905][ T27] audit: type=1326 audit(263.830:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.887153][ T27] audit: type=1326 audit(263.860:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb0b57f94 code=0x7ffc0000 [ 263.899195][ T27] audit: type=1326 audit(263.860:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 263.912646][ T27] audit: type=1326 audit(263.860:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.922483][ T27] audit: type=1326 audit(263.860:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb0b5b5cc code=0x7ffc0000 [ 263.929639][ T27] audit: type=1326 audit(263.860:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb0b5836c code=0x7ffc0000 [ 263.934922][ T27] audit: type=1326 audit(263.860:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.941196][ T27] audit: type=1326 audit(263.860:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.946898][ T27] audit: type=1326 audit(263.870:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.6.1014" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb0b59a68 code=0x7ffc0000 [ 263.961377][ T8021] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1014'. [ 266.287493][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 266.535911][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 266.589307][ T8067] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1029'. [ 266.800221][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.802661][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.832681][ T8094] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 267.834754][ T8094] UDF-fs: Scanning with blocksize 512 failed [ 267.838217][ T8094] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 267.840128][ T8094] UDF-fs: Scanning with blocksize 1024 failed [ 267.843409][ T8094] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 267.845520][ T8094] UDF-fs: Scanning with blocksize 2048 failed [ 267.849757][ T8094] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 267.851792][ T8094] UDF-fs: Scanning with blocksize 4096 failed [ 267.929464][ T4430] Bluetooth: hci3: Frame reassembly failed (-84) [ 268.330782][ T4314] Bluetooth: hci1: command 0x041b tx timeout [ 268.841619][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.845777][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.850094][ T8014] device bridge_slave_0 entered promiscuous mode [ 268.864696][ T5833] device hsr_slave_0 left promiscuous mode [ 268.910496][ T5833] device hsr_slave_1 left promiscuous mode [ 268.989423][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.991481][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.994409][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.997581][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.008041][ T5833] device bridge_slave_1 left promiscuous mode [ 269.016652][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.071514][ T5833] device bridge_slave_0 left promiscuous mode [ 269.075606][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.239600][ T5833] device veth1_macvtap left promiscuous mode [ 269.241424][ T5833] device veth0_macvtap left promiscuous mode [ 269.243761][ T5833] device veth1_vlan left promiscuous mode [ 269.245523][ T5833] device veth0_vlan left promiscuous mode [ 269.844621][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 269.844637][ T27] audit: type=1326 audit(269.820:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 269.851699][ T8130] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1043'. [ 269.856246][ T27] audit: type=1326 audit(269.820:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc357f94 code=0x7ffc0000 [ 269.868497][ T27] audit: type=1326 audit(269.820:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbc35b5cc code=0x7ffc0000 [ 269.876063][ T27] audit: type=1326 audit(269.820:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 269.897336][ T27] audit: type=1326 audit(269.820:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbc35b5cc code=0x7ffc0000 [ 269.919943][ T27] audit: type=1326 audit(269.820:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffbc35836c code=0x7ffc0000 [ 269.931845][ T4314] Bluetooth: hci3: command 0x1003 tx timeout [ 269.935199][ T4299] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 269.940908][ T27] audit: type=1326 audit(269.820:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 269.955217][ T27] audit: type=1326 audit(269.820:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 269.965237][ T27] audit: type=1326 audit(269.820:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 269.976538][ T27] audit: type=1326 audit(269.820:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 270.409098][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 270.434332][ T4314] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 271.586148][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.590667][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.679067][ T8154] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1054'. [ 271.809377][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.812007][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.494632][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 273.394975][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 273.612727][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 273.809998][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.041169][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.414946][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 275.414961][ T27] audit: type=1326 audit(275.390:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 275.417724][ T8190] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1065'. [ 275.427958][ T27] audit: type=1326 audit(275.390:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4557f94 code=0x7ffc0000 [ 275.439181][ T27] audit: type=1326 audit(275.390:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb455b5cc code=0x7ffc0000 [ 275.444142][ T27] audit: type=1326 audit(275.390:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 275.462970][ T27] audit: type=1326 audit(275.390:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb455b5cc code=0x7ffc0000 [ 275.478232][ T27] audit: type=1326 audit(275.390:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb455836c code=0x7ffc0000 [ 275.494400][ T27] audit: type=1326 audit(275.390:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 275.502436][ T27] audit: type=1326 audit(275.390:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 275.507233][ T27] audit: type=1326 audit(275.390:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 275.537574][ T27] audit: type=1326 audit(275.390:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.8.1065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb4559a68 code=0x7ffc0000 [ 277.633150][ T5833] bond0 (unregistering): Released all slaves [ 277.904579][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.906419][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.909483][ T8014] device bridge_slave_1 entered promiscuous mode [ 278.011777][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.020697][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.446650][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.455516][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.490042][ T8014] team0: Port device team_slave_0 added [ 278.497346][ T8014] team0: Port device team_slave_1 added [ 278.540746][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.544877][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.570316][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.576923][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.578782][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.586057][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.681823][ T8014] device hsr_slave_0 entered promiscuous mode [ 278.693885][ T8014] device hsr_slave_1 entered promiscuous mode [ 278.864384][ T8239] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1077'. [ 279.284820][ T8014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.502571][ T8014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.671162][ T8014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.766931][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.769734][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.010745][ T8250] device lo entered promiscuous mode [ 280.013687][ T8250] device tunl0 entered promiscuous mode [ 280.016478][ T8250] device gre0 entered promiscuous mode [ 280.022370][ T8250] device gretap0 entered promiscuous mode [ 280.025041][ T8250] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 280.386550][ T8014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.544280][ T8296] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 281.544949][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.548893][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.609075][ T4299] Bluetooth: hci0: command 0x0406 tx timeout [ 283.177811][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.180596][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.314257][ T4299] block nbd7: Receive control failed (result -32) [ 285.317129][ T8342] block nbd7: shutting down sockets [ 294.579248][ T4314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.582960][ T4314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.587973][ T4314] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.591990][ T4314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.595378][ T4314] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.606315][ T4314] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.767385][ T8322] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1098'. [ 294.778656][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.877180][ T8360] tipc: Started in network mode [ 295.878538][ T8360] tipc: Node identity 2007ff, cluster identity 4711 [ 295.880405][ T8360] tipc: Node number set to 2099199 [ 295.930841][ T8362] netlink: 'syz.7.1109': attribute type 4 has an invalid length. [ 295.971400][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.973786][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.062101][ T8365] netlink: 'syz.7.1109': attribute type 4 has an invalid length. [ 296.424013][ T8014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.458590][ T8014] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.584565][ T8014] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.636291][ T8014] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.649639][ T4299] Bluetooth: hci3: command 0x0409 tx timeout [ 296.725437][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 297.070775][ T8417] netlink: 'syz.7.1122': attribute type 4 has an invalid length. [ 297.320546][ T8420] netlink: 'syz.7.1122': attribute type 4 has an invalid length. [ 297.989441][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.993291][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.300451][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.302456][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.305159][ T8348] device bridge_slave_0 entered promiscuous mode [ 298.332548][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.334526][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.337553][ T8348] device bridge_slave_1 entered promiscuous mode [ 298.729394][ T4299] Bluetooth: hci3: command 0x041b tx timeout [ 298.775350][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.783146][ T8472] netlink: 'syz.7.1137': attribute type 4 has an invalid length. [ 298.804811][ T8475] netlink: 'syz.7.1137': attribute type 4 has an invalid length. [ 298.878220][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.955742][ T5833] device hsr_slave_0 left promiscuous mode [ 299.000370][ T5833] device hsr_slave_1 left promiscuous mode [ 299.069751][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.071667][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.074190][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.078217][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.080845][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.092070][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.093232][ T5833] device bridge_slave_1 left promiscuous mode [ 299.093342][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.140378][ T5833] device bridge_slave_0 left promiscuous mode [ 299.142857][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.279247][ T5833] device veth1_macvtap left promiscuous mode [ 299.280831][ T5833] device veth0_macvtap left promiscuous mode [ 299.282422][ T5833] device veth1_vlan left promiscuous mode [ 299.284055][ T5833] device veth0_vlan left promiscuous mode [ 300.809227][ T4314] Bluetooth: hci3: command 0x040f tx timeout [ 301.202946][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 301.402020][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 301.581398][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.780019][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.889248][ T4299] Bluetooth: hci3: command 0x0419 tx timeout [ 304.307275][ T5833] bond0 (unregistering): Released all slaves [ 304.571833][ T8348] team0: Port device team_slave_0 added [ 304.575032][ T8348] team0: Port device team_slave_1 added [ 304.627529][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.718707][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.742645][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.745206][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.760315][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.762740][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.839138][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.851652][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.854409][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.875230][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.877776][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.880914][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.882661][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.925478][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.927485][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.114463][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.396550][ T8348] device hsr_slave_0 entered promiscuous mode [ 305.580991][ T8348] device hsr_slave_1 entered promiscuous mode [ 305.860884][ T8348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.872693][ T8348] Cannot create hsr debugfs directory [ 306.181294][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.184038][ T9] Bluetooth: (null): Invalid header checksum [ 306.185979][ T9] Bluetooth: (null): Invalid header checksum [ 306.188274][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.192782][ T9] Bluetooth: (null): Invalid header checksum [ 306.210077][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.214973][ T9] Bluetooth: (null): Invalid header checksum [ 306.216677][ T9] Bluetooth: (null): Invalid header checksum [ 306.218262][ T9] Bluetooth: (null): Invalid header checksum [ 306.231166][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.232996][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.236039][ T9] Bluetooth: (null): Invalid header checksum [ 306.242908][ T9] Bluetooth: (null): Invalid header checksum [ 306.249405][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.281946][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.310830][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.314573][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.333027][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.342871][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.346046][ T1697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.349878][ T4430] Bluetooth: (null): Invalid header checksum [ 306.354743][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.357422][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.433121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.436690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.496321][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.615545][ T1697] Bluetooth: (null): Invalid header checksum [ 306.617340][ T1697] Bluetooth: (null): Invalid header checksum [ 306.636582][ T8348] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 306.917618][ T1695] Bluetooth: (null): Invalid header checksum [ 307.046917][ T1695] Bluetooth: (null): Invalid header checksum [ 307.083940][ T1695] Bluetooth: (null): Invalid header checksum [ 307.453058][ T8348] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 307.491868][ T9] Bluetooth: (null): Invalid header checksum [ 307.493681][ T9] Bluetooth: (null): Invalid header checksum [ 307.495244][ T9] Bluetooth: (null): Invalid header checksum [ 307.496832][ T9] Bluetooth: (null): Invalid header checksum [ 307.498420][ T9] Bluetooth: (null): Invalid header checksum [ 307.531467][ T8348] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 307.571265][ T8298] Bluetooth: (null): Invalid header checksum [ 307.583537][ T8348] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 307.708444][ T1695] Bluetooth: (null): Invalid header checksum [ 307.807798][ T1695] Bluetooth: (null): Invalid header checksum [ 308.667556][ T8566] device bridge1 entered promiscuous mode [ 308.675008][ C1] Unknown status report in ack skb [ 308.759374][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.761379][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.810907][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.891384][ T8572] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1164'. [ 308.902813][ T8573] netlink: 'syz.7.1163': attribute type 4 has an invalid length. [ 308.939892][ T8570] netlink: 'syz.7.1163': attribute type 4 has an invalid length. [ 309.311920][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.534379][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.088147][ T8014] device veth0_vlan entered promiscuous mode [ 310.141130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.143829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.179956][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.182283][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.252116][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.253623][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.323397][ T5833] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.363124][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.366346][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.375660][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.406949][ T8014] device veth1_vlan entered promiscuous mode [ 310.444112][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.447188][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.455752][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.461484][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.351096][ T5833] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.904140][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.995165][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.998015][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.001115][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.002922][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.151885][ T5833] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.172586][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.175049][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.178747][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.182694][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.185186][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.187739][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.189645][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.192605][ T8618] netlink: 'syz.6.1174': attribute type 4 has an invalid length. [ 312.197608][ T8620] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1175'. [ 312.223469][ T8014] device veth0_macvtap entered promiscuous mode [ 312.229690][ T8617] netlink: 'syz.6.1174': attribute type 4 has an invalid length. [ 312.341904][ T5833] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.352252][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1176'. [ 312.354573][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.359843][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.370336][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.377730][ T8014] device veth1_macvtap entered promiscuous mode [ 312.392261][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.394676][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.400209][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.405102][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.449891][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.452683][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.463543][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.466198][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.468661][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.517514][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.529154][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.531751][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.534214][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.536853][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.613877][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.634367][ T8348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.655321][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.708228][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.720336][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.723829][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.747134][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.919460][ T27] kauditd_printk_skb: 78 callbacks suppressed [ 312.919557][ T27] audit: type=1326 audit(312.800:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 312.928287][ T27] audit: type=1326 audit(312.800:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 312.936629][ T27] audit: type=1326 audit(312.830:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.125283][ T27] audit: type=1326 audit(312.830:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.186567][ T27] audit: type=1326 audit(312.830:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.240268][ T27] audit: type=1326 audit(312.840:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.294493][ T27] audit: type=1326 audit(312.840:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.539106][ T27] audit: type=1326 audit(312.840:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.545664][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.555322][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.572724][ T27] audit: type=1326 audit(312.850:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.617682][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.621225][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.623776][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.626690][ T27] audit: type=1326 audit(312.850:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc359a68 code=0x7ffc0000 [ 313.632881][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.635495][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.648733][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.656548][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.669694][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.675995][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.678287][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.684105][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.699137][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.709698][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.710368][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.845192][ T8014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.847448][ T8014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.850519][ T8014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.852715][ T8014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.246562][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.248846][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.255203][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.477815][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.480962][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.639530][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.278409][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.344554][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.348193][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.437538][ T8693] netlink: 'syz.5.1187': attribute type 4 has an invalid length. [ 317.665583][ T8697] netlink: 'syz.5.1187': attribute type 4 has an invalid length. [ 317.856349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.859604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.005172][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.012564][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.015342][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.035853][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.038411][ T8348] device veth0_vlan entered promiscuous mode [ 318.130939][ T8348] device veth1_vlan entered promiscuous mode [ 318.266433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.274588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.277111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.299687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.304523][ T8348] device veth0_macvtap entered promiscuous mode [ 318.308736][ T8348] device veth1_macvtap entered promiscuous mode [ 318.479625][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.482301][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.514067][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.528476][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.557607][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.561272][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.563619][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.566236][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.615452][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.618286][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.625868][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.628377][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.633261][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.636071][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.641975][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.584518][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.598177][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.602053][ T4299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.604787][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.608730][ T4299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.612150][ T4299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.726541][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.731477][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.733941][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.736590][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.761774][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.764281][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.771281][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.790388][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.792948][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.795675][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.826720][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.941115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.943951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.948628][ T8348] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.952450][ T8348] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.952514][ T8733] infiniband syz1: set down [ 319.954767][ T8348] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.954794][ T8348] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.956096][ T8733] infiniband syz1: added ipvlan0 [ 319.969147][ T8733] infiniband syz1: Couldn't open port 1 [ 320.413100][ T8733] RDS/IB: syz1: added [ 320.419575][ T8733] smc: adding ib device syz1 with port count 1 [ 320.423015][ T8733] smc: ib device syz1 port 1 has pnetid [ 321.040888][ T8778] netlink: 'syz.5.1199': attribute type 4 has an invalid length. [ 321.139998][ T8778] netlink: 'syz.5.1199': attribute type 4 has an invalid length. [ 321.614976][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.617830][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.634132][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.699119][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 321.747469][ T8794] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1204'. [ 321.854920][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.857170][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.890694][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.021178][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 322.032556][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.064911][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.319808][ T8824] netlink: 'syz.9.1211': attribute type 4 has an invalid length. [ 322.401885][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.403933][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.406422][ T8737] device bridge_slave_0 entered promiscuous mode [ 322.423616][ T8821] netlink: 'syz.9.1211': attribute type 4 has an invalid length. [ 322.428540][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1214'. [ 322.461557][ T5833] device hsr_slave_0 left promiscuous mode [ 322.491515][ T5833] device hsr_slave_1 left promiscuous mode [ 322.582874][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.584781][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.590405][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.592354][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.605049][ T5833] device bridge_slave_1 left promiscuous mode [ 322.606689][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.643705][ T8846] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1218'. [ 322.650153][ T5833] device bridge_slave_0 left promiscuous mode [ 322.651758][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.789291][ T5833] device veth1_macvtap left promiscuous mode [ 322.790887][ T5833] device veth0_macvtap left promiscuous mode [ 322.792466][ T5833] device veth1_vlan left promiscuous mode [ 322.794010][ T5833] device veth0_vlan left promiscuous mode [ 322.926415][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.937224][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.957114][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.961307][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.769142][ T4299] Bluetooth: hci1: command 0x041b tx timeout [ 324.905218][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 325.101201][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 325.311373][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.561753][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.859146][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 327.939195][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 328.233878][ T5833] bond0 (unregistering): Released all slaves [ 328.533266][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.535224][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.537774][ T8737] device bridge_slave_1 entered promiscuous mode [ 328.569991][ T8853] netlink: 'syz.6.1221': attribute type 5 has an invalid length. [ 328.593172][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.598116][ T8858] device bridge_slave_0 left promiscuous mode [ 328.609637][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.724521][ T8858] device bridge_slave_1 left promiscuous mode [ 328.726197][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.804109][ T8872] [ 328.804740][ T8872] ====================================================== [ 328.806513][ T8872] WARNING: possible circular locking dependency detected [ 328.808370][ T8872] 6.1.128-syzkaller #0 Not tainted [ 328.809649][ T8872] ------------------------------------------------------ [ 328.811523][ T8872] syz.6.1226/8872 is trying to acquire lock: [ 328.812920][ T8872] ffff0000f9008910 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 328.815831][ T8872] [ 328.815831][ T8872] but task is already holding lock: [ 328.817581][ T8872] ffff0000da8b0c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 328.819630][ T8872] [ 328.819630][ T8872] which lock already depends on the new lock. [ 328.819630][ T8872] [ 328.822140][ T8872] [ 328.822140][ T8872] the existing dependency chain (in reverse order) is: [ 328.824429][ T8872] [ 328.824429][ T8872] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 328.826384][ T8872] lock_sock_nested+0x78/0x138 [ 328.827694][ T8872] smc_listen_out+0x114/0x3c4 [ 328.829052][ T8872] smc_listen_work+0x1e4/0x1038 [ 328.830381][ T8872] process_one_work+0x7ac/0x1404 [ 328.831756][ T8872] worker_thread+0x8e4/0xfec [ 328.833092][ T8872] kthread+0x250/0x2d8 [ 328.834341][ T8872] ret_from_fork+0x10/0x20 [ 328.835531][ T8872] [ 328.835531][ T8872] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 328.838040][ T8872] __lock_acquire+0x3338/0x7680 [ 328.839413][ T8872] lock_acquire+0x26c/0x7cc [ 328.840641][ T8872] __flush_work+0xf8/0x1c0 [ 328.841919][ T8872] __cancel_work_timer+0x3ec/0x548 [ 328.843309][ T8872] cancel_work_sync+0x24/0x38 [ 328.844625][ T8872] smc_clcsock_release+0x64/0xec [ 328.846005][ T8872] __smc_release+0x55c/0x700 [ 328.847309][ T8872] smc_close_non_accepted+0xd8/0x260 [ 328.848739][ T8872] smc_close_active+0x9bc/0xd20 [ 328.850102][ T8872] __smc_release+0xa0/0x700 [ 328.851384][ T8872] smc_release+0x260/0x528 [ 328.852606][ T8872] sock_close+0xb8/0x1fc [ 328.853810][ T8872] __fput+0x1c8/0x7c8 [ 328.854968][ T8872] ____fput+0x20/0x30 [ 328.856158][ T8872] task_work_run+0x240/0x2f0 [ 328.857461][ T8872] do_notify_resume+0x2080/0x2cb8 [ 328.858883][ T8872] el0_svc+0x9c/0x168 [ 328.860079][ T8872] el0t_64_sync_handler+0x84/0xf0 [ 328.861522][ T8872] el0t_64_sync+0x18c/0x190 [ 328.862686][ T8872] [ 328.862686][ T8872] other info that might help us debug this: [ 328.862686][ T8872] [ 328.865182][ T8872] Possible unsafe locking scenario: [ 328.865182][ T8872] [ 328.867094][ T8872] CPU0 CPU1 [ 328.868451][ T8872] ---- ---- [ 328.869833][ T8872] lock(sk_lock-AF_SMC/1); [ 328.870987][ T8872] lock((work_completion)(&new_smc->smc_listen_work)); [ 328.873356][ T8872] lock(sk_lock-AF_SMC/1); [ 328.875109][ T8872] lock((work_completion)(&new_smc->smc_listen_work)); [ 328.876859][ T8872] [ 328.876859][ T8872] *** DEADLOCK *** [ 328.876859][ T8872] [ 328.878891][ T8872] 2 locks held by syz.6.1226/8872: [ 328.880165][ T8872] #0: ffff0000df255010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 328.882670][ T8872] #1: ffff0000da8b0c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 328.885000][ T8872] [ 328.885000][ T8872] stack backtrace: [ 328.886424][ T8872] CPU: 1 PID: 8872 Comm: syz.6.1226 Not tainted 6.1.128-syzkaller #0 [ 328.888498][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.891014][ T8872] Call trace: [ 328.891783][ T8872] dump_backtrace+0x1c8/0x1f4 [ 328.892933][ T8872] show_stack+0x2c/0x3c [ 328.893955][ T8872] dump_stack_lvl+0x108/0x170 [ 328.895045][ T8872] dump_stack+0x1c/0x5c [ 328.896115][ T8872] print_circular_bug+0x150/0x1b8 [ 328.897358][ T8872] check_noncircular+0x2cc/0x378 [ 328.898537][ T8872] __lock_acquire+0x3338/0x7680 [ 328.899667][ T8872] lock_acquire+0x26c/0x7cc [ 328.900706][ T8872] __flush_work+0xf8/0x1c0 [ 328.901760][ T8872] __cancel_work_timer+0x3ec/0x548 [ 328.903023][ T8872] cancel_work_sync+0x24/0x38 [ 328.904254][ T8872] smc_clcsock_release+0x64/0xec [ 328.905543][ T8872] __smc_release+0x55c/0x700 [ 328.906665][ T8872] smc_close_non_accepted+0xd8/0x260 [ 328.908044][ T8872] smc_close_active+0x9bc/0xd20 [ 328.909286][ T8872] __smc_release+0xa0/0x700 [ 328.910453][ T8872] smc_release+0x260/0x528 [ 328.911535][ T8872] sock_close+0xb8/0x1fc [ 328.912565][ T8872] __fput+0x1c8/0x7c8 [ 328.913544][ T8872] ____fput+0x20/0x30 [ 328.914526][ T8872] task_work_run+0x240/0x2f0 [ 328.915657][ T8872] do_notify_resume+0x2080/0x2cb8 [ 328.916935][ T8872] el0_svc+0x9c/0x168 [ 328.917951][ T8872] el0t_64_sync_handler+0x84/0xf0 [ 328.919254][ T8872] el0t_64_sync+0x18c/0x190 [ 329.333680][ T8858] bond0: (slave bond_slave_0): Releasing backup interface [ 329.387789][ T8858] bond0: (slave bond_slave_1): Releasing backup interface [ 329.433667][ T8858] device team_slave_0 left promiscuous mode [ 329.443240][ T8858] team0: Port device team_slave_0 removed [ 329.445224][ T8858] device team_slave_1 left promiscuous mode [ 329.458428][ T8858] team0: Port device team_slave_1 removed [ 329.460612][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.462502][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.474428][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.476252][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.506795][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.517874][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.535797][ T8737] team0: Port device team_slave_0 added [ 329.538384][ T8737] team0: Port device team_slave_1 added [ 329.553047][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.554698][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.561946][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.565436][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.567144][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.573943][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.620682][ T8737] device hsr_slave_0 entered promiscuous mode [ 329.649425][ T8737] device hsr_slave_1 entered promiscuous mode [ 329.699107][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.701157][ T8737] Cannot create hsr debugfs directory [ 329.800962][ T8737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.890501][ T8737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.971678][ T8737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.062333][ T8737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.275314][ T8737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.326402][ T8737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.355933][ T8737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.385690][ T8737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.481954][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.488204][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.492776][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.762340][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.772027][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.774753][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.777117][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.778857][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.782115][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.784493][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.786774][ T1695] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.788657][ T1695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.791660][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.796381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.808255][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.811922][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.814458][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.817129][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.821803][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.824331][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.826767][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.829525][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.833682][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.836063][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.843941][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.957467][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.960978][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.985027][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.002634][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.005193][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.010682][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.013456][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.016737][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.021797][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.025726][ T8737] device veth0_vlan entered promiscuous mode [ 331.055729][ T8737] device veth1_vlan entered promiscuous mode [ 331.069648][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.072272][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.074794][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.077257][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.082952][ T8737] device veth0_macvtap entered promiscuous mode [ 331.086986][ T8737] device veth1_macvtap entered promiscuous mode [ 331.098025][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.101015][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.103640][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.106387][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.108933][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.113677][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.116270][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.120070][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.123644][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.151560][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.154141][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.156512][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.159148][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.162548][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.165152][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.167680][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.170460][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.173026][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.175701][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.178148][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.182077][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.185676][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.189736][ T8737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.192023][ T8737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.194294][ T8737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.196442][ T8737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.203186][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.205991][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.262787][ T8737] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 331.316944][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.317332][ T8737] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 331.319008][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.328136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.344726][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.346757][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.348742][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.552794][ T5833] device hsr_slave_0 left promiscuous mode [ 332.609421][ T5833] device hsr_slave_1 left promiscuous mode [ 332.699223][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.701303][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.703556][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.705377][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.707746][ T5833] device bridge_slave_1 left promiscuous mode [ 332.709978][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.749801][ T5833] device bridge_slave_0 left promiscuous mode [ 332.751554][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.891265][ T5833] device veth1_macvtap left promiscuous mode [ 332.893017][ T5833] device veth0_macvtap left promiscuous mode [ 332.894663][ T5833] device veth1_vlan left promiscuous mode [ 332.896164][ T5833] device veth0_vlan left promiscuous mode [ 334.630831][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 334.800915][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 334.989720][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.189705][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.576349][ T5833] bond0 (unregistering): Released all slaves [ 337.929169][ T4314] Bluetooth: hci6: command 0x0406 tx timeout