last executing test programs: 21.497146916s ago: executing program 2 (id=345): socket$l2tp(0x2, 0x2, 0x73) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="f93cf2f7daa8a7431b7b4224811fcf53028be744c5") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x0) mkdir(0x0, 0x180) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 17.953528754s ago: executing program 2 (id=356): syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0xffffffff, 'none\x00', 0x28, 0x6, 0x1e}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x25}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xed7, 0x0, r4, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 17.298954962s ago: executing program 2 (id=357): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x8000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2, 0xb20cdcc13a54e1ea}, {0x5, 0x6}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.561813329s ago: executing program 2 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 15.277279464s ago: executing program 2 (id=365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 12.186415163s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 11.937306733s ago: executing program 32 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 9.525843494s ago: executing program 1 (id=382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x81) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.423696203s ago: executing program 1 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000041}, 0x40040a4) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={0x0}}, 0x4000) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0xcf, 0xf4, 0x8, 0x572, 0xd811, 0x94e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0xb3, 0x5b, 0x1e}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b00", @ANYBLOB="868f54"], 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8}}}, &(0x7f00000003c0)=0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x1, 0x20000000, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x5, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 6.422181713s ago: executing program 3 (id=391): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 6.142155352s ago: executing program 3 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 5.442111089s ago: executing program 4 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2/\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) 4.191871055s ago: executing program 0 (id=397): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x8000) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x800, 0xc749, 0x0, 0xfffffffe, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffffffe, 0xfffffffd, 0xed2, 0xe, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 3.447757523s ago: executing program 1 (id=398): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=user,afid=0x00000000000001ff,nodevmap']) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) read$FUSE(r0, &(0x7f0000008180)={0x2020}, 0x2020) 3.357598452s ago: executing program 3 (id=399): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a700000020000010902240001000000000904000001030000000921000000012205000905810300000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93fd85d8dee45ed"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200) r1 = syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0xe, 0x10, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1aa8a00837"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffb, 0xfff9}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x21}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3f, 0x3, 0x9}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x37b775cea5990a17}}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 3.341447822s ago: executing program 1 (id=400): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) 3.295524042s ago: executing program 4 (id=401): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x64f015fd58a9b8d5) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3.215447202s ago: executing program 0 (id=402): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.807546031s ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 2.536145709s ago: executing program 4 (id=404): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f0000000000)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00', 0x230) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019080)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1}) symlink(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r3, 0x2, 0xfc7, &(0x7f0000000200)="b98e883e7745885b86090d37f24fb831f6bd7a402bee3319c8a9ffbd894ea8dd65ae13f205144975036257eab1dbc43b9453429c", 0x34) 2.535234399s ago: executing program 1 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x4, @mcast1, 0x5}, 0x1c) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d", 0x12) 2.525617849s ago: executing program 3 (id=406): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce, 0x0, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.583781186s ago: executing program 3 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) shmdt(0x0) listen(0xffffffffffffffff, 0xfff) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000840)=""/18) 1.563889316s ago: executing program 0 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}}, 0x0) 1.484432136s ago: executing program 4 (id=409): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xf, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 150.290961ms ago: executing program 0 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 65.2537ms ago: executing program 3 (id=411): r0 = socket(0x2, 0x2, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 37.051651ms ago: executing program 1 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x24}, 0x9}], 0x8000000000001e4, 0x300, 0x0) 0s ago: executing program 4 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1a}, 0x60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 57.011727][ T4161] cgroup: Unknown subsys name 'net' [ 57.124436][ T4161] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.620922][ T4161] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.395941][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 60.462153][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.567101][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 60.591482][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 60.636424][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.644628][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.653094][ T4176] device bridge_slave_0 entered promiscuous mode [ 60.661428][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.668678][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.676620][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.690453][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.711156][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.718309][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.726090][ T4176] device bridge_slave_1 entered promiscuous mode [ 60.740901][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748156][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.755958][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.821514][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.832513][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.862065][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.872862][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.890097][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.897315][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.906222][ T4173] device bridge_slave_0 entered promiscuous mode [ 60.944549][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.951896][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.959945][ T4173] device bridge_slave_1 entered promiscuous mode [ 60.990141][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.997280][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.005328][ T4172] device bridge_slave_0 entered promiscuous mode [ 61.031387][ T4181] team0: Port device team_slave_0 added [ 61.047485][ T4176] team0: Port device team_slave_0 added [ 61.053762][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.060946][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.069115][ T4172] device bridge_slave_1 entered promiscuous mode [ 61.086120][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.097566][ T4181] team0: Port device team_slave_1 added [ 61.104758][ T4176] team0: Port device team_slave_1 added [ 61.117187][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.124564][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.132415][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.141618][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.182837][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.192191][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.199698][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.207485][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.224768][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.231969][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.258320][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.280351][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.305627][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.312777][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.338911][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.354467][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.361674][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.387704][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.417445][ T4173] team0: Port device team_slave_0 added [ 61.428466][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.435441][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.461952][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.484846][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.497393][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.508467][ T4173] team0: Port device team_slave_1 added [ 61.533969][ T4172] team0: Port device team_slave_0 added [ 61.542121][ T4172] team0: Port device team_slave_1 added [ 61.603449][ T4182] team0: Port device team_slave_0 added [ 61.623421][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.630415][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.645024][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.652225][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.678856][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.691807][ T4182] team0: Port device team_slave_1 added [ 61.698162][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.705115][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.731482][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.758185][ T4176] device hsr_slave_0 entered promiscuous mode [ 61.765100][ T4176] device hsr_slave_1 entered promiscuous mode [ 61.772125][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.780086][ T4176] Cannot create hsr debugfs directory [ 61.786045][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.793216][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.819514][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.851665][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.858886][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.885025][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.905098][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.912215][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.938385][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.994558][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.001946][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.028254][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.058944][ T4163] Bluetooth: hci3: command 0x0409 tx timeout [ 62.059671][ T4173] device hsr_slave_0 entered promiscuous mode [ 62.072571][ T4173] device hsr_slave_1 entered promiscuous mode [ 62.079583][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.087147][ T4173] Cannot create hsr debugfs directory [ 62.138084][ T4163] Bluetooth: hci4: command 0x0409 tx timeout [ 62.147756][ T4163] Bluetooth: hci2: command 0x0409 tx timeout [ 62.148100][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 62.167350][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.181657][ T4172] device hsr_slave_0 entered promiscuous mode [ 62.188767][ T4172] device hsr_slave_1 entered promiscuous mode [ 62.195356][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.203352][ T4172] Cannot create hsr debugfs directory [ 62.226697][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.233727][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.240871][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.250886][ T4182] Cannot create hsr debugfs directory [ 62.515618][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.527614][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.543195][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.553209][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.614009][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.627628][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.645204][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.656301][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.727302][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.739390][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.750256][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.765252][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.834422][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.844050][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.868744][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.876343][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.905103][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.956733][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.973220][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.982977][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.993056][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.004007][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.014370][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.026969][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.048946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.062323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.071704][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.079091][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.096384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.105212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.113953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.122503][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.129608][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.137419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.147654][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.171730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.181472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.191879][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.215651][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.232374][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.263838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.273311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.283384][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.290515][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.299350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.310304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.324811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.333208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.342454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.351726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.360954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.370044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.381764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.390633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.399664][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.406805][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.445907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.455244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.466557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.475214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.485425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.499377][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.510534][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.518075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.544561][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.564736][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.576300][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.587498][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.604956][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.616639][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.643357][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.655252][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.665133][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.673868][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.682436][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.692047][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.701332][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.708458][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.719819][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.732053][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.745599][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.757610][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.769575][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.778420][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.786759][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.795951][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.805948][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.813129][ T622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.836347][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.845402][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.854244][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.861361][ T622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.871377][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.880560][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.889307][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.896416][ T622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.904921][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.914005][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.928498][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.936617][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.945004][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.958910][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.984670][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.000139][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.015458][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.027191][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.037184][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.046445][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.066904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.081812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.093441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.111248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.121440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.130996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.139656][ T4218] Bluetooth: hci3: command 0x041b tx timeout [ 64.141404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.163897][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.177448][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.189723][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.206456][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.217050][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.218581][ T4218] Bluetooth: hci0: command 0x041b tx timeout [ 64.228374][ T4220] Bluetooth: hci1: command 0x041b tx timeout [ 64.240379][ T4218] Bluetooth: hci2: command 0x041b tx timeout [ 64.243008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.246563][ T4218] Bluetooth: hci4: command 0x041b tx timeout [ 64.259810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.270329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.278197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.285976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.295077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.304579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.313267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.322140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.330862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.339645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.347192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.364693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.373845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.383069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.405031][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.449061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.461931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.471735][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.478872][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.493541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.503468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.512528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.522863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.533740][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.540858][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.549171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.558286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.567459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.576156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.584380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.604341][ T4176] device veth0_vlan entered promiscuous mode [ 64.646074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.659306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.670082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.679298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.711129][ T4176] device veth1_vlan entered promiscuous mode [ 64.726128][ T4181] device veth0_vlan entered promiscuous mode [ 64.742821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.755977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.765269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.775146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.784135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.792696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.801233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.827304][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.838687][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.852213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.864259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.872853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.881572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.919365][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.926856][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.938198][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.945727][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.953574][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.962400][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.979053][ T4181] device veth1_vlan entered promiscuous mode [ 64.987197][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.995861][ T4176] device veth0_macvtap entered promiscuous mode [ 65.009707][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.051694][ T4176] device veth1_macvtap entered promiscuous mode [ 65.091025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.105366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.114452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.123013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.132613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.141599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.158996][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.169328][ T4181] device veth0_macvtap entered promiscuous mode [ 65.187060][ T4181] device veth1_macvtap entered promiscuous mode [ 65.196078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.211988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.224716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.236905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.251069][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.270386][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.284688][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.294511][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.303625][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.332206][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.341478][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.356179][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.371211][ T4182] device veth0_vlan entered promiscuous mode [ 65.382123][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.393285][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.405346][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.413329][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.425376][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.434082][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.442960][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.452326][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.460411][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.478536][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487411][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.496907][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.507370][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.540629][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.551543][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.563076][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.586196][ T4182] device veth1_vlan entered promiscuous mode [ 65.606300][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.615500][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.626031][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.635235][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.644513][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.656357][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.665519][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.675874][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685284][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.707420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.717119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.747298][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.764902][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.777639][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.786249][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.808349][ T4173] device veth0_vlan entered promiscuous mode [ 65.846717][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.856036][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.880948][ T4182] device veth0_macvtap entered promiscuous mode [ 65.894839][ T4182] device veth1_macvtap entered promiscuous mode [ 65.903392][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.912309][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.915172][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.924136][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.927786][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.937403][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.952114][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.960616][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.970010][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.978969][ T4172] device veth0_vlan entered promiscuous mode [ 66.008742][ T4173] device veth1_vlan entered promiscuous mode [ 66.035242][ T4172] device veth1_vlan entered promiscuous mode [ 66.084812][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.094395][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.105509][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.106292][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.123927][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.135842][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.148932][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.166103][ T4173] device veth0_macvtap entered promiscuous mode [ 66.184113][ T4173] device veth1_macvtap entered promiscuous mode [ 66.194317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.203041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.211641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.218215][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 66.222822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.233633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.242083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.251558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.260985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.269962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.278746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.286779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.303521][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 66.316053][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.326924][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 66.327413][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.341480][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 66.346271][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.353125][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 66.359925][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.378785][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.389873][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.410093][ T4172] device veth0_macvtap entered promiscuous mode [ 66.428775][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.430045][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.447565][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.468199][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.478986][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.489470][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.500718][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.514809][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.523679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.532183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.541966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.552484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.561439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.571179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.580920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.589877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.615867][ T4172] device veth1_macvtap entered promiscuous mode [ 66.634783][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.645528][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.656144][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.674050][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.686604][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.699338][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.724543][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.732502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.741937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.756897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.776072][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.790418][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.805558][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.814642][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.842776][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.851923][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.863093][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.872772][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.873340][ T4253] raw_sendmsg: syz.2.6 forgot to set AF_INET. Fix it! [ 66.894807][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.904638][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.917551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.940324][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.959017][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.969466][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.997689][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.009534][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.021753][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.032513][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.043680][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.055528][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.104987][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.121447][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.142718][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.159842][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.177105][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.209192][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.219427][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.230202][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.240124][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.251021][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.263816][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.366453][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.380918][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.447469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.474484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.485037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.792135][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.869936][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.962374][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.257873][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299103][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 68.342881][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.359373][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.388104][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 68.421654][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 68.443039][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 68.449798][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 68.463831][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.519852][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.570540][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.673244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.693976][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.730283][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.775204][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.807483][ T4276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.842194][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.864443][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.915052][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.923119][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.136575][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.435941][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.928090][ T26] audit: type=1326 audit(1738456558.293:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 70.979446][ T4298] "syz.2.15" (4298) uses obsolete ecb(arc4) skcipher [ 71.078100][ T26] audit: type=1326 audit(1738456558.293:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.149955][ T26] audit: type=1326 audit(1738456558.293:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.196589][ T26] audit: type=1326 audit(1738456558.293:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.259307][ T4303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.274122][ T4309] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 71.292860][ T26] audit: type=1326 audit(1738456558.293:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.333954][ T26] audit: type=1326 audit(1738456558.293:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.355242][ T4309] team0: Cannot enslave team device to itself [ 71.361531][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368854][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.399124][ T26] audit: type=1326 audit(1738456558.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.416324][ T4309] device vlan2 entered promiscuous mode [ 71.427568][ T26] audit: type=1326 audit(1738456558.293:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.447588][ T4309] device vlan0 entered promiscuous mode [ 71.471744][ T4309] team0: Port device vlan2 added [ 71.478355][ T26] audit: type=1326 audit(1738456558.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.520961][ T26] audit: type=1326 audit(1738456558.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4293 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 71.665618][ T4317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.695851][ T4317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.759938][ T4317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.836359][ T4324] tipc: Started in network mode [ 71.845711][ T4324] tipc: Node identity 6, cluster identity 4711 [ 71.852633][ T4324] tipc: Node number set to 6 [ 72.084175][ T4333] process 'syz.2.24' launched './file1' with NULL argv: empty string added [ 72.156659][ T4328] binder: 4325:4328 ioctl 40046205 0 returned -22 [ 73.217824][ C1] sched: RT throttling activated [ 74.892393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.901741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.911898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.921501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.931230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.940837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.950427][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.960178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.969929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.979538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.980237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.149400][ T4371] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.403817][ T4373] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 75.533693][ T4377] loop2: detected capacity change from 0 to 512 [ 75.580911][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 75.629161][ T4381] loop4: detected capacity change from 0 to 256 [ 75.639960][ T4377] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 75.671192][ T4377] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.713976][ T4377] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.820533][ T4384] Cannot find del_set index 4 as target [ 76.009000][ T4381] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 76.195908][ T4377] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.860468][ T4377] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.40: bg 0: block 40: padding at end of block bitmap is not set [ 76.978100][ T4377] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 77.073069][ T4377] EXT4-fs (loop2): 1 truncate cleaned up [ 77.119996][ T4377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.186814][ T4388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.265743][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 77.265760][ T26] audit: type=1800 audit(1738456564.653:66): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name="bus" dev="loop4" ino=1048599 res=0 errno=0 [ 77.342186][ T4377] kvm: pic: non byte read [ 77.386181][ T4377] kvm: pic: non byte read [ 78.950588][ T4401] loop4: detected capacity change from 0 to 1024 [ 79.958070][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.000442][ T4397] hfsplus: bad catalog entry type [ 80.207941][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 80.275305][ T4412] tipc: Started in network mode [ 80.288619][ T4412] tipc: Node identity 560565de5a54, cluster identity 4711 [ 80.295973][ T4412] tipc: Enabled bearer , priority 0 [ 80.369566][ T4412] device syzkaller0 entered promiscuous mode [ 80.436965][ T4410] tipc: Resetting bearer [ 80.590745][ T4410] tipc: Disabling bearer [ 81.328136][ T7] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 81.337620][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.347141][ T7] usb 3-1: Product: syz [ 81.351691][ T7] usb 3-1: Manufacturer: syz [ 81.356708][ T7] usb 3-1: SerialNumber: syz [ 81.368387][ T7] usb 3-1: config 0 descriptor?? [ 81.415574][ T7] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 81.445265][ T4433] loop3: detected capacity change from 0 to 512 [ 81.527139][ T4433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.571790][ T4433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.586585][ T1325] cfg80211: failed to load regulatory.db [ 81.665949][ T4435] loop0: detected capacity change from 0 to 4096 [ 81.687503][ T4433] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 81.708885][ T4433] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.57: invalid indirect mapped block 4294967295 (level 0) [ 81.742973][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.760062][ T4433] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.57: invalid indirect mapped block 4294967295 (level 1) [ 81.791203][ T4433] EXT4-fs (loop3): 1 orphan inode deleted [ 81.797060][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 81.827674][ T9] hfsplus: b-tree write err: -5, ino 4 [ 81.858252][ T7] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 81.875848][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,,errors=continue. Quota mode: writeback. [ 81.917642][ T7] visor: probe of 3-1:0.0 failed with error -5 [ 82.103497][ T4435] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 82.125114][ T7] usb 3-1: USB disconnect, device number 2 [ 83.226494][ T4451] Zero length message leads to an empty skb [ 83.263326][ T4451] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 83.575701][ T4462] "syz.0.63" (4462) uses obsolete ecb(arc4) skcipher [ 84.547102][ T4467] loop4: detected capacity change from 0 to 512 [ 84.851865][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.157958][ T1325] usb 3-1: Using ep0 maxpacket: 8 [ 86.201986][ T26] audit: type=1326 audit(1738456573.593:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 86.347613][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.954163][ T26] audit: type=1326 audit(1738456573.593:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.037556][ T26] audit: type=1326 audit(1738456573.593:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.060280][ T26] audit: type=1326 audit(1738456573.593:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.144614][ T26] audit: type=1326 audit(1738456573.593:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.172053][ T1325] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 87.182901][ T1325] usb 3-1: can't read configurations, error -71 [ 87.191868][ T26] audit: type=1326 audit(1738456573.593:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.216366][ T26] audit: type=1326 audit(1738456573.593:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.253643][ T21] usb 2-1: config 0 has no interfaces? [ 87.269636][ T26] audit: type=1326 audit(1738456573.593:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.314459][ T26] audit: type=1326 audit(1738456573.593:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.375536][ T26] audit: type=1326 audit(1738456573.593:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd3bda9 code=0x7fc00000 [ 87.404499][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.437585][ T21] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.642984][ T21] usb 2-1: Manufacturer: syz [ 87.688477][ T21] usb 2-1: config 0 descriptor?? [ 87.707970][ T21] usb 2-1: can't set config #0, error -71 [ 87.732948][ T4512] loop2: detected capacity change from 0 to 512 [ 88.620935][ T21] usb 2-1: USB disconnect, device number 2 [ 88.666274][ T4512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.789657][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 88.808995][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 90.086401][ T4536] Cannot find add_set index 0 as target [ 91.587435][ T4543] loop3: detected capacity change from 0 to 512 [ 91.781007][ T4543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.810968][ T4543] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.873942][ T4555] loop0: detected capacity change from 0 to 512 [ 91.982688][ T4555] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.089918][ T4555] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 92.412640][ T4555] __quota_error: 42 callbacks suppressed [ 92.412657][ T4555] Quota error (device loop0): write_blk: dquota write failed [ 92.435928][ T4555] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 92.491494][ T4572] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 93.083311][ T4555] Quota error (device loop0): write_blk: dquota write failed [ 93.217224][ T4555] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 93.285250][ T4555] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.90: Failed to acquire dquot type 1 [ 93.299773][ T4555] EXT4-fs (loop0): 1 truncate cleaned up [ 93.305468][ T4555] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,barrier=0x0000000000000003,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 96.594995][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 96.619534][ T4615] netlink: 156 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.638026][ T4614] netlink: 31 bytes leftover after parsing attributes in process `syz.1.109'. [ 96.652545][ T4614] netlink: 'syz.1.109': attribute type 3 has an invalid length. [ 96.682361][ T4617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.697017][ T4614] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 96.871071][ T4614] netlink: 31 bytes leftover after parsing attributes in process `syz.1.109'. [ 99.826042][ T4628] syz.0.112 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.855992][ T4632] loop2: detected capacity change from 0 to 256 [ 99.939932][ T4632] exfat: Unknown parameter 'Sh_&a^@RY cayrFzQ>P߁*ٹV8d|CpI77"TUTCH{W.H K;^ j_]75qYbYF' [ 99.988885][ T4633] loop1: detected capacity change from 0 to 4096 [ 100.059191][ T4633] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 100.151978][ T4632] loop2: detected capacity change from 0 to 512 [ 100.176851][ T4633] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 100.257642][ T4633] ntfs3: loop1: Failed to load $MFT. [ 102.016463][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.876050][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 103.049296][ T4673] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 103.950992][ T4673] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.082532][ T4682] input: syz0 as /devices/virtual/input/input5 [ 107.213904][ T4701] : renamed from vlan0 [ 107.576518][ T4713] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.892309][ T4722] loop1: detected capacity change from 0 to 1024 [ 109.240342][ T4731] device bridge0 entered promiscuous mode [ 109.246770][ T4731] device macvtap1 entered promiscuous mode [ 109.450609][ T4731] bridge0: port 3(macvtap1) entered blocking state [ 109.523956][ T4731] bridge0: port 3(macvtap1) entered disabled state [ 109.547206][ T4731] device bridge0 left promiscuous mode [ 110.133672][ T4738] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.180263][ T4738] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.886242][ T4753] ALSA: mixer_oss: invalid OSS volume '' [ 112.182998][ T4761] loop0: detected capacity change from 0 to 1764 [ 113.394470][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 113.497097][ T4775] device syzkaller1 entered promiscuous mode [ 113.588861][ T4780] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 113.772468][ T4782] overlayfs: failed to get inode (-116) [ 113.787270][ T4784] netlink: 'syz.3.163': attribute type 4 has an invalid length. [ 113.810955][ T4782] overlayfs: failed to look up (file0) for ino (-116) [ 113.828010][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.850521][ T4784] netlink: 17 bytes leftover after parsing attributes in process `syz.3.163'. [ 113.990564][ T4786] netlink: 'syz.4.164': attribute type 10 has an invalid length. [ 114.026243][ T4786] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.098000][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 114.173873][ T4797] mip6: mip6_destopt_init_state: spi is not 0: 3523477504 [ 115.028215][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.050255][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC7, skipping [ 117.288066][ T21] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 117.297152][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.342893][ T4809] overlayfs: failed to clone upperpath [ 117.531363][ T21] usb 3-1: config 0 descriptor?? [ 117.537715][ T4815] syz.0.172[4815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.538495][ T4815] syz.0.172[4815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.561018][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 117.581790][ T21] usb 3-1: can't set config #0, error -71 [ 117.598931][ T21] usb 3-1: USB disconnect, device number 5 [ 117.704089][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 118.785681][ T4834] loop1: detected capacity change from 0 to 1024 [ 118.875716][ T4834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.168545][ T4862] hfs: can't find a HFS filesystem on dev nullb0 [ 123.454459][ T4877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 123.660014][ T4885] mmap: syz.0.196 (4885) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 124.113384][ T4896] loop1: detected capacity change from 0 to 512 [ 126.018388][ T4896] ======================================================= [ 126.018388][ T4896] WARNING: The mand mount option has been deprecated and [ 126.018388][ T4896] and is ignored by this kernel. Remove the mand [ 126.018388][ T4896] option from the mount to silence this warning. [ 126.018388][ T4896] ======================================================= [ 126.878236][ T4896] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 126.952558][ T4896] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.200040][ T4923] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 127.547936][ T4163] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 127.969348][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 127.984625][ T4935] loop4: detected capacity change from 0 to 128 [ 128.032621][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 128.048091][ T4933] device bridge_slave_1 left promiscuous mode [ 128.058644][ T4163] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 128.081788][ T4163] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 128.132927][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.198152][ T4163] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.233815][ T4933] device bridge_slave_0 left promiscuous mode [ 128.260846][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.358153][ T4163] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.384564][ T4163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.500495][ T4163] usb 1-1: Product: syz [ 128.547402][ T4163] usb 1-1: Manufacturer: syz [ 128.562639][ T4163] usb 1-1: SerialNumber: syz [ 129.182253][ T4956] loop4: detected capacity change from 0 to 64 [ 129.309238][ T4163] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 130.641266][ T4271] usb 1-1: USB disconnect, device number 2 [ 130.648499][ T4972] device syzkaller0 entered promiscuous mode [ 130.661785][ T4271] usblp0: removed [ 130.740837][ T4977] ip6t_srh: unknown srh match flags 4000 [ 130.741861][ T4980] loop0: detected capacity change from 0 to 1024 [ 130.999495][ T4985] loop4: detected capacity change from 0 to 128 [ 131.080717][ T4986] syz.3.226[4986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.081310][ T4986] syz.3.226[4986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.866584][ T26] audit: type=1804 audit(1738456619.253:119): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.227" name="/newroot/42/file0/bus" dev="loop4" ino=1048600 res=1 errno=0 [ 131.913428][ T4989] loop2: detected capacity change from 0 to 8 [ 131.954438][ T26] audit: type=1804 audit(1738456619.313:120): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.227" name="/newroot/42/file0/bus" dev="loop4" ino=1048600 res=1 errno=0 [ 132.120738][ T4980] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.137339][ T4980] EXT4-fs (loop0): Ignoring removed orlov option [ 132.347370][ T4980] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000004,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 132.822945][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829571][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147473][ T5010] netlink: 'syz.4.233': attribute type 12 has an invalid length. [ 133.447047][ T4980] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 134.379019][ T4980] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 134.855039][ T5040] loop2: detected capacity change from 0 to 64 [ 134.888164][ T5035] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.263973][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 137.323155][ T5047] loop1: detected capacity change from 0 to 32768 [ 139.615467][ T5074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.652993][ T5074] device batadv_slave_1 entered promiscuous mode [ 139.807598][ T5080] loop1: detected capacity change from 0 to 512 [ 139.906008][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.918416][ T5080] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.118449][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.156577][ T5080] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.568275][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 140.582033][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.629150][ T7] usb 3-1: config 0 descriptor?? [ 140.690665][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 141.105278][ T5107] ipt_REJECT: ECHOREPLY no longer supported. [ 142.105875][ T5115] netlink: 52 bytes leftover after parsing attributes in process `syz.1.263'. [ 142.299634][ T5119] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.913198][ T5133] overlayfs: failed to clone upperpath [ 144.141468][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.247980][ T7] gspca_stv06xx: I2C: Read error writing address: -71 [ 144.271823][ T7] usb 3-1: USB disconnect, device number 6 [ 144.508231][ T21] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.520153][ T21] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.714933][ T21] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.724209][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.758242][ T5134] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.888269][ T21] usb 5-1: USB disconnect, device number 2 [ 146.588466][ T5159] ipt_REJECT: ECHOREPLY no longer supported. [ 148.297695][ T5162] loop1: detected capacity change from 0 to 128 [ 148.361624][ T4565] udevd[4565]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.398175][ T5162] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.462999][ T5162] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 148.493518][ T5162] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.499476][ T5170] netlink: 52 bytes leftover after parsing attributes in process `syz.3.277'. [ 149.948195][ T5179] loop1: detected capacity change from 0 to 1024 [ 150.019237][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 150.044711][ T5181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 150.349983][ T5189] loop4: detected capacity change from 0 to 128 [ 151.293659][ T5089] Set syz1 is full, maxelem 65536 reached [ 153.420698][ T5213] loop2: detected capacity change from 0 to 128 [ 153.614729][ T5213] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.766611][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 153.851716][ T5213] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.796182][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.912048][ T5241] loop1: detected capacity change from 0 to 2048 [ 155.925628][ T5234] device ip6gre1 entered promiscuous mode [ 155.942353][ T5244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 156.013017][ T5241] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.054961][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 156.130707][ T5250] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.398190][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.409855][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.426425][ T5259] loop2: detected capacity change from 0 to 256 [ 156.433002][ T7] usb 5-1: Product: syz [ 156.437190][ T7] usb 5-1: Manufacturer: syz [ 156.442402][ T7] usb 5-1: SerialNumber: syz [ 156.457998][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 156.700670][ T5267] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 156.933776][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.976999][ T5267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.376393][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.385173][ T7] r8152-cfgselector 5-1: bad CDC descriptors [ 158.417984][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.426197][ T7] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 158.446118][ T5270] bond1: (slave bridge0): making interface the new active one [ 158.552400][ T5270] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 158.644880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.662934][ T5275] device vlan2 entered promiscuous mode [ 158.681142][ T5275] device bond1 entered promiscuous mode [ 158.686810][ T5275] device bridge0 entered promiscuous mode [ 159.796419][ T5299] loop4: detected capacity change from 0 to 16 [ 159.871402][ T5299] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.130638][ T4180] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 160.154286][ T26] audit: type=1800 audit(1738456647.513:121): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.313" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 160.446545][ T5307] loop1: detected capacity change from 0 to 512 [ 160.545731][ T5307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.722104][ T5307] EXT4-fs (loop1): 1 truncate cleaned up [ 160.737682][ T5307] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 160.755883][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.944226][ T5309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 161.754239][ T5330] 9pnet: Insufficient options for proto=fd [ 164.807331][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'. [ 165.511572][ T5360] loop2: detected capacity change from 0 to 1024 [ 165.570167][ T5362] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.713266][ T5360] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 165.713266][ T5360] [ 165.724550][ T5360] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 166.104063][ T5366] netlink: 'syz.1.333': attribute type 8 has an invalid length. [ 166.247079][ T5366] bridge0: port 3(syz_tun) entered blocking state [ 166.386985][ T5366] bridge0: port 3(syz_tun) entered disabled state [ 167.056267][ T5366] device syz_tun entered promiscuous mode [ 167.074896][ T5366] bridge0: port 3(syz_tun) entered blocking state [ 167.082368][ T5366] bridge0: port 3(syz_tun) entered forwarding state [ 167.140083][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 167.401054][ T5389] lo speed is unknown, defaulting to 1000 [ 167.439801][ T5389] lo speed is unknown, defaulting to 1000 [ 167.446077][ T5389] lo speed is unknown, defaulting to 1000 [ 167.497005][ T5389] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.656082][ T5389] lo speed is unknown, defaulting to 1000 [ 167.687638][ T5389] lo speed is unknown, defaulting to 1000 [ 167.719416][ T5389] lo speed is unknown, defaulting to 1000 [ 167.758060][ T5389] lo speed is unknown, defaulting to 1000 [ 167.788732][ T5389] lo speed is unknown, defaulting to 1000 [ 170.615647][ T5421] Cannot find map_set index 0 as target [ 171.267030][ T5429] program syz.0.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.733333][ T26] audit: type=1326 audit(1738456660.113:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 172.941073][ T26] audit: type=1326 audit(1738456660.153:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.092277][ T26] audit: type=1326 audit(1738456660.483:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.291776][ T26] audit: type=1326 audit(1738456660.533:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.545726][ T26] audit: type=1326 audit(1738456660.533:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.718495][ T26] audit: type=1326 audit(1738456660.553:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.853663][ T26] audit: type=1326 audit(1738456660.583:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 173.932281][ T26] audit: type=1326 audit(1738456660.613:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 174.035830][ T26] audit: type=1326 audit(1738456660.613:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 174.175342][ T26] audit: type=1326 audit(1738456660.613:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8af86da9 code=0x7ffc0000 [ 174.181887][ T5463] loop0: detected capacity change from 0 to 512 [ 174.340145][ T5467] loop1: detected capacity change from 0 to 164 [ 174.951838][ T5464] loop2: detected capacity change from 0 to 1024 [ 175.012137][ T5463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.356127][ T4176] hfsplus: bad catalog entry type [ 175.768274][ T4163] Bluetooth: hci5: command 0x1003 tx timeout [ 175.824210][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 176.258434][ T5463] EXT4-fs (loop0): 1 truncate cleaned up [ 176.264406][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 176.608549][ T5476] loop1: detected capacity change from 0 to 32768 [ 176.664438][ T5476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.366 (5476) [ 176.747988][ T5476] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 176.757138][ T5476] BTRFS info (device loop1): using free space tree [ 176.764051][ T5476] BTRFS info (device loop1): has skinny extents [ 178.239875][ T144] hfsplus: b-tree write err: -5, ino 4 [ 178.271796][ T4163] Bluetooth: hci5: command 0x1001 tx timeout [ 178.341778][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 178.469128][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 178.614109][ T5507] loop0: detected capacity change from 0 to 512 [ 178.656608][ T5476] BTRFS info (device loop1): enabling ssd optimizations [ 178.712609][ T5507] EXT4-fs (loop0): Ignoring removed orlov option [ 178.753391][ T5507] EXT4-fs (loop0): 1 truncate cleaned up [ 178.792514][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,noinit_itable,quota,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 179.046598][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.269464][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.314747][ T5517] lo speed is unknown, defaulting to 1000 [ 179.370056][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.412057][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 179.451237][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.661484][ T5517] chnl_net:caif_netlink_parms(): no params data found [ 180.801761][ T5533] Bluetooth: hci5: command 0x1009 tx timeout [ 180.896767][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.904147][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.914785][ T5517] device bridge_slave_0 entered promiscuous mode [ 180.937164][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.959366][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.968492][ T5517] device bridge_slave_1 entered promiscuous mode [ 181.001929][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.013936][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.102387][ T5517] team0: Port device team_slave_0 added [ 181.118754][ T9] tipc: Left network mode [ 181.120362][ T5517] team0: Port device team_slave_1 added [ 181.249162][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.257960][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 181.266690][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.344041][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.513928][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.521106][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.547672][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.426605][ T5517] device hsr_slave_0 entered promiscuous mode [ 182.439774][ T5517] device hsr_slave_1 entered promiscuous mode [ 182.458882][ T5517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.475878][ T5517] Cannot create hsr debugfs directory [ 182.516740][ T5572] tipc: Enabling of bearer rejected, failed to enable media [ 182.809417][ T5577] loop0: detected capacity change from 0 to 2048 [ 183.620061][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 183.675953][ T5577] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 183.738982][ T5577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.877171][ T5517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.915580][ T5517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.936684][ T5517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.955865][ T5517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.965954][ T5534] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 185.069369][ T5608] team0: No ports can be present during mode change [ 185.100253][ T5608] device vlan0 entered promiscuous mode [ 185.190764][ T5608] team0: Port device vlan0 added [ 185.212270][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 185.444599][ T5609] team0 (unregistering): Port device team_slave_0 removed [ 185.468177][ T5534] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 185.529962][ T5534] usb 2-1: config 0 has no interface number 0 [ 185.575873][ T5609] team0 (unregistering): Port device team_slave_1 removed [ 185.622845][ T5534] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 185.722609][ T5534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.956993][ T5534] usb 2-1: config 0 descriptor?? [ 186.051196][ T5533] Bluetooth: hci2: command 0x040f tx timeout [ 186.203095][ T5289] Bluetooth: hci4: command 0x0406 tx timeout [ 186.209407][ T5289] Bluetooth: hci1: command 0x0406 tx timeout [ 186.252113][ T5534] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 186.259162][ T5534] usb 2-1: setting power ON [ 186.264318][ T5534] dvb-usb: bulk message failed: -22 (2/0) [ 186.272090][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 186.409141][ T5609] team0 (unregistering): Port device vlan0 removed [ 186.417959][ T5534] dvb-usb: bulk message failed: -22 (1/0) [ 186.478479][ T5622] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 186.548758][ T5599] udc-core: couldn't find an available UDC or it's busy [ 186.549862][ T5534] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 186.566237][ T5623] bond1: (slave gretap1): making interface the new active one [ 186.580062][ T5534] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 186.581231][ T5599] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.587693][ T5534] dvb_usb_cxusb: probe of 2-1:0.30 failed with error -22 [ 186.603838][ T5623] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 186.659215][ T5534] usb 2-1: USB disconnect, device number 3 [ 186.668774][ T9] device hsr_slave_0 left promiscuous mode [ 186.696277][ T9] device hsr_slave_1 left promiscuous mode [ 186.703474][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.712248][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.722133][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.729914][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.737668][ T9] device bridge_slave_1 left promiscuous mode [ 186.746317][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.760309][ T9] device bridge_slave_0 left promiscuous mode [ 186.766558][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.788277][ T9] device veth1_macvtap left promiscuous mode [ 186.794750][ T9] device veth0_macvtap left promiscuous mode [ 186.802827][ T9] device veth1_vlan left promiscuous mode [ 187.007360][ T9] team0 (unregistering): Port device team_slave_1 removed [ 187.024178][ T9] team0 (unregistering): Port device team_slave_0 removed [ 187.040250][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.057607][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.131736][ T9] bond0 (unregistering): Released all slaves [ 187.224138][ T5608] syz.3.393 (5608) used greatest stack depth: 18200 bytes left [ 187.271588][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.317141][ T5534] lo speed is unknown, defaulting to 1000 [ 187.392545][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.446679][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.633193][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.674868][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.684409][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.693129][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.700390][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.745833][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.774434][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.845463][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.901127][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.908304][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.923569][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.083630][ T5517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.550473][ T5517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.942083][ T4222] Bluetooth: hci2: command 0x0419 tx timeout [ 188.952535][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.000540][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.036349][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.075549][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.085290][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.094111][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.114476][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.124674][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.154398][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.184200][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.416180][ T5668] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 189.758554][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.608007][ T5677] team0: No ports can be present during mode change [ 190.858855][ T5677] [ 190.861233][ T5677] ============================================ [ 190.867388][ T5677] WARNING: possible recursive locking detected [ 190.873565][ T5677] 5.15.178-syzkaller #0 Not tainted [ 190.878777][ T5677] -------------------------------------------- [ 190.884939][ T5677] syz.0.410/5677 is trying to acquire lock: [ 190.890853][ T5677] ffff888062fc0d00 (team->team_lock_key){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 190.901001][ T5677] [ 190.901001][ T5677] but task is already holding lock: [ 190.908373][ T5677] ffff888062fc0d00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 190.917896][ T5677] [ 190.917896][ T5677] other info that might help us debug this: [ 190.925969][ T5677] Possible unsafe locking scenario: [ 190.925969][ T5677] [ 190.933455][ T5677] CPU0 [ 190.936754][ T5677] ---- [ 190.940046][ T5677] lock(team->team_lock_key); [ 190.944832][ T5677] lock(team->team_lock_key); [ 190.949613][ T5677] [ 190.949613][ T5677] *** DEADLOCK *** [ 190.949613][ T5677] [ 190.957767][ T5677] May be due to missing lock nesting notation [ 190.957767][ T5677] [ 190.966184][ T5677] 2 locks held by syz.0.410/5677: [ 190.971220][ T5677] #0: ffffffff8dc42788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 190.980662][ T5677] #1: ffff888062fc0d00 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 190.990626][ T5677] [ 190.990626][ T5677] stack backtrace: [ 190.996522][ T5677] CPU: 1 PID: 5677 Comm: syz.0.410 Not tainted 5.15.178-syzkaller #0 [ 191.004597][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.014680][ T5677] Call Trace: [ 191.017976][ T5677] [ 191.020923][ T5677] dump_stack_lvl+0x1e3/0x2d0 [ 191.025630][ T5677] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 191.031288][ T5677] ? panic+0x860/0x860 [ 191.035376][ T5677] validate_chain+0x46d2/0x5930 [ 191.040241][ T5677] ? stack_trace_save+0x113/0x1c0 [ 191.045292][ T5677] ? mark_lock+0x98/0x340 [ 191.049636][ T5677] ? reacquire_held_locks+0x660/0x660 [ 191.055023][ T5677] ? reacquire_held_locks+0x660/0x660 [ 191.060411][ T5677] ? mark_lock+0x98/0x340 [ 191.064870][ T5677] ? mark_lock+0x98/0x340 [ 191.069208][ T5677] __lock_acquire+0x1295/0x1ff0 [ 191.074076][ T5677] lock_acquire+0x1db/0x4f0 [ 191.078586][ T5677] ? team_port_change_check+0x51/0x1e0 [ 191.084055][ T5677] ? read_lock_is_recursive+0x10/0x10 [ 191.089467][ T5677] ? __might_sleep+0xc0/0xc0 [ 191.094061][ T5677] ? cfg80211_netdev_notifier_call+0x1ff/0x1210 [ 191.100303][ T5677] ? print_irqtrace_events+0x210/0x210 [ 191.105772][ T5677] __mutex_lock_common+0x1da/0x25a0 [ 191.110978][ T5677] ? team_port_change_check+0x51/0x1e0 [ 191.116455][ T5677] ? __local_bh_enable_ip+0x164/0x1f0 [ 191.121828][ T5677] ? lockdep_hardirqs_on+0x94/0x130 [ 191.127029][ T5677] ? __local_bh_enable_ip+0x164/0x1f0 [ 191.132411][ T5677] ? igmpv3_del_delrec+0x710/0x710 [ 191.137525][ T5677] ? ip_mc_up+0x1d1/0x2f0 [ 191.141850][ T5677] ? team_port_change_check+0x51/0x1e0 [ 191.147310][ T5677] ? _local_bh_enable+0xa0/0xa0 [ 191.152154][ T5677] ? bond_netdev_event+0xd8/0xe80 [ 191.157182][ T5677] ? mutex_lock_io_nested+0x60/0x60 [ 191.162380][ T5677] ? dev_get_flags+0x141/0x1c0 [ 191.167141][ T5677] ? bond_ipsec_offload_ok+0x3f0/0x3f0 [ 191.172606][ T5677] ? memset+0x1f/0x40 [ 191.176597][ T5677] mutex_lock_nested+0x17/0x20 [ 191.181365][ T5677] team_port_change_check+0x51/0x1e0 [ 191.186656][ T5677] team_device_event+0x4a7/0x580 [ 191.191601][ T5677] raw_notifier_call_chain+0xd0/0x170 [ 191.196979][ T5677] __dev_notify_flags+0x304/0x610 [ 191.202008][ T5677] ? __dev_change_flags+0x6e0/0x6e0 [ 191.207200][ T5677] ? __dev_change_flags+0x505/0x6e0 [ 191.212397][ T5677] ? dev_get_flags+0x1c0/0x1c0 [ 191.217168][ T5677] dev_change_flags+0xe7/0x190 [ 191.221935][ T5677] vlan_device_event+0x442/0x1dd0 [ 191.226963][ T5677] ? rcu_lock_release+0x20/0x20 [ 191.231816][ T5677] ? br_device_event+0x143/0x970 [ 191.236756][ T5677] ? phonet_exit_net+0x80/0x80 [ 191.241523][ T5677] ? register_vlan_dev+0x800/0x800 [ 191.246634][ T5677] ? br_switchdev_event+0x480/0x480 [ 191.251836][ T5677] ? isotp_notifier+0xa0/0x690 [ 191.256598][ T5677] ? cgw_notifier+0xcc/0x3a0 [ 191.261196][ T5677] ? j1939_netdev_notify+0xfd/0x2e0 [ 191.266421][ T5677] raw_notifier_call_chain+0xd0/0x170 [ 191.271809][ T5677] dev_open+0x1c1/0x260 [ 191.275966][ T5677] ? netdev_notify_peers+0x20/0x20 [ 191.281084][ T5677] ? __kmalloc+0x168/0x300 [ 191.285502][ T5677] ? team_add_slave+0x890/0x27a0 [ 191.290441][ T5677] team_add_slave+0x981/0x27a0 [ 191.295253][ T5677] ? __dev_change_flags+0x6e0/0x6e0 [ 191.300539][ T5677] ? team_netpoll_cleanup+0xf0/0xf0 [ 191.305738][ T5677] ? dev_get_flags+0x1c0/0x1c0 [ 191.310498][ T5677] ? stack_trace_save+0x1c0/0x1c0 [ 191.315522][ T5677] ? is_bpf_text_address+0x24f/0x260 [ 191.320804][ T5677] ? nla_strscpy+0xf9/0x170 [ 191.325312][ T5677] ? mutex_is_locked+0xe/0x40 [ 191.329989][ T5677] do_setlink+0xdd3/0x3d80 [ 191.334426][ T5677] ? stack_trace_save+0x113/0x1c0 [ 191.339450][ T5677] ? stack_trace_snprint+0xe0/0xe0 [ 191.344563][ T5677] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 191.350719][ T5677] ? __kasan_slab_alloc+0x43/0xc0 [ 191.355744][ T5677] ? ____kasan_kmalloc+0xd1/0xf0 [ 191.360680][ T5677] ? rtnl_newlink+0x125/0x2070 [ 191.365456][ T5677] ? rtnetlink_rcv_msg+0x993/0xee0 [ 191.370565][ T5677] ? netlink_rcv_skb+0x1cf/0x410 [ 191.375503][ T5677] ? __nla_validate_parse+0x1e6b/0x27f0 [ 191.381059][ T5677] ? __nla_validate+0x50/0x50 [ 191.385740][ T5677] ? nla_strscpy+0xf9/0x170 [ 191.390293][ T5677] ? full_name_hash+0x8f/0xe0 [ 191.394985][ T5677] ? validate_linkmsg+0x3db/0x4c0 [ 191.400019][ T5677] rtnl_newlink+0x17d6/0x2070 [ 191.404706][ T5677] ? rtnl_newlink+0x471/0x2070 [ 191.409471][ T5677] ? rtnl_setlink+0x560/0x560 [ 191.414157][ T5677] ? unwind_next_frame+0x1437/0x1fa0 [ 191.419487][ T5677] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 191.424604][ T5677] ? rtnl_setlink+0x560/0x560 [ 191.429277][ T5677] rtnetlink_rcv_msg+0x993/0xee0 [ 191.434215][ T5677] ? rtnetlink_bind+0x80/0x80 [ 191.438892][ T5677] ? __local_bh_enable_ip+0x164/0x1f0 [ 191.444260][ T5677] ? lockdep_hardirqs_on+0x94/0x130 [ 191.449455][ T5677] ? __local_bh_enable_ip+0x164/0x1f0 [ 191.454837][ T5677] ? local_bh_enable+0x5/0x20 [ 191.459513][ T5677] ? _local_bh_enable+0xa0/0xa0 [ 191.464364][ T5677] ? __dev_queue_xmit+0x1bf8/0x32b0 [ 191.469568][ T5677] ? __copy_skb_header+0x47b/0x600 [ 191.474678][ T5677] ? dev_queue_xmit+0x20/0x20 [ 191.479352][ T5677] ? memcpy+0x3c/0x60 [ 191.483340][ T5677] netlink_rcv_skb+0x1cf/0x410 [ 191.488105][ T5677] ? rtnetlink_bind+0x80/0x80 [ 191.492781][ T5677] ? netlink_ack+0xb10/0xb10 [ 191.497378][ T5677] netlink_unicast+0x7b6/0x980 [ 191.502151][ T5677] ? netlink_detachskb+0x90/0x90 [ 191.507090][ T5677] ? __virt_addr_valid+0x3bb/0x460 [ 191.512201][ T5677] ? 0xffffffff81000000 [ 191.516401][ T5677] ? __check_object_size+0x300/0x410 [ 191.521710][ T5677] ? bpf_lsm_netlink_send+0x5/0x10 [ 191.526836][ T5677] netlink_sendmsg+0xa30/0xd60 [ 191.531608][ T5677] ? netlink_getsockopt+0x5b0/0x5b0 [ 191.536808][ T5677] ? plist_check_list+0x20d/0x220 [ 191.541834][ T5677] ? aa_sock_msg_perm+0x91/0x150 [ 191.546771][ T5677] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.552058][ T5677] ? security_socket_sendmsg+0x7d/0xa0 [ 191.557523][ T5677] ? netlink_getsockopt+0x5b0/0x5b0 [ 191.562729][ T5677] ____sys_sendmsg+0x59e/0x8f0 [ 191.567498][ T5677] ? iovec_from_user+0x300/0x390 [ 191.572465][ T5677] ? __sys_sendmsg_sock+0x30/0x30 [ 191.577499][ T5677] ___sys_sendmsg+0x252/0x2e0 [ 191.582176][ T5677] ? __sys_sendmsg+0x260/0x260 [ 191.586956][ T5677] ? __fdget+0x191/0x220 [ 191.591199][ T5677] __se_sys_sendmsg+0x19a/0x260 [ 191.596057][ T5677] ? __x64_sys_sendmsg+0x80/0x80 [ 191.601006][ T5677] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.606988][ T5677] ? lockdep_hardirqs_on+0x94/0x130 [ 191.612195][ T5677] ? syscall_enter_from_user_mode+0x2e/0x240 [ 191.618186][ T5677] do_syscall_64+0x3b/0xb0 [ 191.622610][ T5677] ? clear_bhb_loop+0x15/0x70 [ 191.627289][ T5677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.633192][ T5677] RIP: 0033:0x7fec8af86da9 [ 191.637619][ T5677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.657229][ T5677] RSP: 002b:00007fec88df0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.665648][ T5677] RAX: ffffffffffffffda RBX: 00007fec8b19ffa0 RCX: 00007fec8af86da9 [ 191.673619][ T5677] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 191.681587][ T5677] RBP: 00007fec8b0082a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.689559][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.697532][ T5677] R13: 0000000000000000 R14: 00007fec8b19ffa0 R15: 00007ffc7c2e8618 [ 191.705517][ T5677] [ 194.222618][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229123][ T1428] ieee802154 phy1 wpan1: encryption failed: -22