last executing test programs: 4.762362906s ago: executing program 4 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 4.314201005s ago: executing program 4 (id=425): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = memfd_create(0x0, 0x3) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001200)=@sha1={0x1, "133f9613e19d9ae35fcacf2bf3c557a71b10d14b"}, 0x15, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f0000000480)=""/4081, 0x103a) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) 4.160129218s ago: executing program 1 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.961229572s ago: executing program 2 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.910177723s ago: executing program 1 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.880500353s ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.674848467s ago: executing program 2 (id=432): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.670225937s ago: executing program 4 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.506042871s ago: executing program 3 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.437761122s ago: executing program 0 (id=435): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972ba0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e8e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 2.252702566s ago: executing program 4 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2.208174707s ago: executing program 2 (id=437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffff40}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xe) 2.171555638s ago: executing program 3 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.952801822s ago: executing program 0 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2b, &(0x7f0000000000), 0x4) 1.808230854s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 1.808068644s ago: executing program 2 (id=441): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x9, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xb0b, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, r0}, 0x38) 1.730268846s ago: executing program 1 (id=442): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.728872336s ago: executing program 4 (id=443): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = memfd_create(0x0, 0x3) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001200)=@sha1={0x1, "133f9613e19d9ae35fcacf2bf3c557a71b10d14b"}, 0x15, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x7ff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f0000000480)=""/4081, 0x103a) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) 1.714788946s ago: executing program 0 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.444244772s ago: executing program 3 (id=445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.427903992s ago: executing program 1 (id=446): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) 714.352886ms ago: executing program 0 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 584.249349ms ago: executing program 2 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 539.453629ms ago: executing program 1 (id=449): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bind$packet(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972ba0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e8e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 525.147009ms ago: executing program 3 (id=450): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) 25.52936ms ago: executing program 0 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 25.34571ms ago: executing program 2 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.17259ms ago: executing program 3 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @union]}}, 0x0, 0x32}, 0x28) 7.02283ms ago: executing program 1 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 0s ago: executing program 4 (id=455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 67.767484][ T4254] cgroup: Unknown subsys name 'net' [ 67.926105][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.422674][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.364178][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370760][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.491961][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.500320][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.510087][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.520053][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.527587][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.535869][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.544636][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.548250][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.551952][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.559555][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.567177][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.574025][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.580875][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.589353][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.594986][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.609492][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.610237][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.617346][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.624141][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.631649][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.639159][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.645581][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.653238][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.659584][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.675417][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.696588][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.704446][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.705307][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.719493][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.725660][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.174453][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 72.192744][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 72.296928][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 72.312664][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 72.384613][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 72.462756][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.471216][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.479091][ T4281] device bridge_slave_0 entered promiscuous mode [ 72.487555][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.494845][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.503046][ T4266] device bridge_slave_0 entered promiscuous mode [ 72.535212][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.542549][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.551160][ T4281] device bridge_slave_1 entered promiscuous mode [ 72.558900][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566131][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.574702][ T4266] device bridge_slave_1 entered promiscuous mode [ 72.581886][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.589064][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.599702][ T4265] device bridge_slave_0 entered promiscuous mode [ 72.637749][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.645037][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.653986][ T4265] device bridge_slave_1 entered promiscuous mode [ 72.661172][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.668247][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.677087][ T4277] device bridge_slave_0 entered promiscuous mode [ 72.716468][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.724272][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.732995][ T4277] device bridge_slave_1 entered promiscuous mode [ 72.749402][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.760695][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.771724][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.796686][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.804069][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.812762][ T4264] device bridge_slave_0 entered promiscuous mode [ 72.821695][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.841440][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.859497][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.866737][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.875358][ T4264] device bridge_slave_1 entered promiscuous mode [ 72.900121][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.912275][ T4281] team0: Port device team_slave_0 added [ 72.920482][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.954819][ T4281] team0: Port device team_slave_1 added [ 72.962514][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.989492][ T4266] team0: Port device team_slave_0 added [ 73.016107][ T4265] team0: Port device team_slave_0 added [ 73.025009][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.035716][ T4266] team0: Port device team_slave_1 added [ 73.050062][ T4265] team0: Port device team_slave_1 added [ 73.080167][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.090286][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.097249][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.123296][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.143885][ T4277] team0: Port device team_slave_0 added [ 73.173003][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.180444][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.207239][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.220484][ T4277] team0: Port device team_slave_1 added [ 73.226948][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.234065][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.260180][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.278524][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.286111][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.312607][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.337013][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.344102][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.375962][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.388965][ T4264] team0: Port device team_slave_0 added [ 73.395490][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.402594][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.428913][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.462934][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.470254][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.496887][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.509455][ T4264] team0: Port device team_slave_1 added [ 73.531821][ T4281] device hsr_slave_0 entered promiscuous mode [ 73.538656][ T4281] device hsr_slave_1 entered promiscuous mode [ 73.547732][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.554926][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.581305][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.644807][ T4265] device hsr_slave_0 entered promiscuous mode [ 73.652182][ T4265] device hsr_slave_1 entered promiscuous mode [ 73.658877][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.666855][ T4265] Cannot create hsr debugfs directory [ 73.682976][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.690093][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.716758][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.739577][ T4266] device hsr_slave_0 entered promiscuous mode [ 73.746612][ T4266] device hsr_slave_1 entered promiscuous mode [ 73.753578][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.760807][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 73.766384][ T4266] Cannot create hsr debugfs directory [ 73.767406][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 73.779082][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 73.782999][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 73.785633][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 73.805036][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.812235][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.838669][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.872843][ T4277] device hsr_slave_0 entered promiscuous mode [ 73.880188][ T4277] device hsr_slave_1 entered promiscuous mode [ 73.886886][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.895071][ T4277] Cannot create hsr debugfs directory [ 73.985755][ T4264] device hsr_slave_0 entered promiscuous mode [ 73.992995][ T4264] device hsr_slave_1 entered promiscuous mode [ 73.999620][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.007262][ T4264] Cannot create hsr debugfs directory [ 74.277761][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.288780][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.313068][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.328551][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.358210][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.368602][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.395341][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.420548][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.466914][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.493052][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.507466][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.519658][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.592700][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.611351][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.631350][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.651485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.661160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.670744][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.688370][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.701172][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.745327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.754378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.764307][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.771586][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.781285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.790579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.799370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.806610][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.814800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.823703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.845593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.866400][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.875672][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.888571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.898812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.908781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.922524][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.938361][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.947563][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.993090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.002959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.013009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.021873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.031252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.039549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.081431][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.088943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.098129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.119475][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.152288][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.170098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.178039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.187736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.198704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.208353][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.215544][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.224024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.233194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.242768][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.249827][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.257502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.293625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.305315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.318823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.334524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.341729][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.355774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.392937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.407186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.417790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.427170][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.434417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.445566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.455689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.465524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.474416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.484104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.492978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.502034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.511171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.535339][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.551353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.565442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.582825][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.601534][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.618835][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.636964][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.648056][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.673779][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.683477][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.696129][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.708656][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.734522][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.766769][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.785127][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.795639][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.805016][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.816622][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.830282][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.841028][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 75.847092][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 75.850066][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 75.853340][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 75.860250][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 75.874356][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.901463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.909281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.926949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.938894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.953805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.965683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.976999][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.984271][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.993707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.003181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.012571][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.019653][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.027647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.036988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.045746][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.052863][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.061132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.070373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.078797][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.085970][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.094396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.103927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.112238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.136421][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.159810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.203271][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.222006][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.242609][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.259299][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.269053][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.278803][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.344400][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.354476][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.377618][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.390250][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.399146][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.408982][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.419719][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.429366][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.438970][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.449010][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.462339][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.474164][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.508676][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.519132][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.537744][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.548064][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.600226][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.608916][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.627452][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.637650][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.657158][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.676727][ T4281] device veth0_vlan entered promiscuous mode [ 76.685755][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.694684][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.705150][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.713334][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.736899][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.758690][ T4281] device veth1_vlan entered promiscuous mode [ 76.797608][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.817255][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.827165][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.856480][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.918006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.933459][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.967779][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.996624][ T4281] device veth0_macvtap entered promiscuous mode [ 77.048576][ T4281] device veth1_macvtap entered promiscuous mode [ 77.074793][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.085622][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.099195][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.122565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.161303][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.182828][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.193232][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.202702][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.249691][ T4265] device veth0_vlan entered promiscuous mode [ 77.268587][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.288631][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.317341][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.333877][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.345931][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.366154][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.398872][ T4265] device veth1_vlan entered promiscuous mode [ 77.414303][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.425762][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.443290][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.478018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.485787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.520264][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.529297][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.556942][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566798][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.594822][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.625443][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.638188][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.648674][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.658643][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.669194][ T4265] device veth0_macvtap entered promiscuous mode [ 77.718683][ T4265] device veth1_macvtap entered promiscuous mode [ 77.732754][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.741479][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.749349][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.758171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.768909][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.778593][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.787754][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.797282][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.807436][ T4264] device veth0_vlan entered promiscuous mode [ 77.846866][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.858007][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.872855][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.898597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.914052][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.922428][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 77.922469][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 77.930380][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 77.936540][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.941589][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 77.948805][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 77.961845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.972172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.981527][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.994880][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.006733][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.017720][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.030814][ T4264] device veth1_vlan entered promiscuous mode [ 78.051142][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.063535][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.071661][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.079338][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.088701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.098932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.108029][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.117685][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.126006][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.139541][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.148681][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.157907][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.167300][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179096][ T4277] device veth0_vlan entered promiscuous mode [ 78.205281][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.222636][ T4266] device veth0_vlan entered promiscuous mode [ 78.231980][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.245675][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.264620][ T4277] device veth1_vlan entered promiscuous mode [ 78.282709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.303879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.316653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.336484][ T4264] device veth0_macvtap entered promiscuous mode [ 78.346006][ T4266] device veth1_vlan entered promiscuous mode [ 78.381097][ T4277] device veth0_macvtap entered promiscuous mode [ 78.404237][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.413515][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.422998][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.431943][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.443244][ T4264] device veth1_macvtap entered promiscuous mode [ 78.454936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.463412][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.501218][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.516036][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.525065][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.536166][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.546084][ T4277] device veth1_macvtap entered promiscuous mode [ 78.557294][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.566767][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.580155][ T4266] device veth0_macvtap entered promiscuous mode [ 78.608180][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.623370][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.632694][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.654680][ T4266] device veth1_macvtap entered promiscuous mode [ 78.670974][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.681938][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.694261][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.704990][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.717953][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.743416][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.760615][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.797363][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.811005][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.822822][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.833459][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.844088][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.854774][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.867738][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.876267][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.897685][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.908807][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.926594][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.936700][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.946102][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.965215][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.994830][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.006543][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.019074][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.031833][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.052341][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.067449][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.077443][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.091370][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.101389][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.112232][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.125876][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.138327][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.147500][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.156787][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.166122][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.182271][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.191478][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.201325][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.212000][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244945][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.254655][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.263888][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.276952][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.315132][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.369994][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.389908][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.428176][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.446833][ T4395] loop3: detected capacity change from 0 to 512 [ 79.453816][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.471276][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.491357][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.506375][ T4395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.518444][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.539373][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.573194][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.585761][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.612518][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.630613][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.641434][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.649237][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.668942][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.679469][ T4395] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.691970][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.702642][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.712856][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.723725][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.735356][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.758359][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.776920][ T4395] Zero length message leads to an empty skb [ 79.781104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.830294][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.847694][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.856776][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.867508][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923961][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 79.975665][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.000205][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 80.006100][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.006444][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 80.020032][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 80.020053][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 80.026125][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 80.081058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.135787][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.210958][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.232630][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.241800][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.266482][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.318426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.490938][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.618855][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.990739][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.017683][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.091745][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.133791][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.143030][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.152504][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.162060][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.427753][ T4418] loop0: detected capacity change from 0 to 512 [ 81.601658][ T126] cfg80211: failed to load regulatory.db [ 81.625951][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.636790][ T4427] loop1: detected capacity change from 0 to 1024 [ 81.655830][ T4418] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.668715][ T4427] EXT4-fs: Ignoring removed bh option [ 81.747587][ T4434] loop4: detected capacity change from 0 to 128 [ 81.751321][ T4422] hub 2-0:1.0: USB hub found [ 81.799299][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.815872][ T4422] hub 2-0:1.0: 1 port detected [ 81.977829][ T4427] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 82.170506][ T4427] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 82.341776][ T4445] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 82.355545][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 82.441206][ T4445] team0: Port device dummy0 added [ 82.484322][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 82.490925][ T4449] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 82.569796][ T4450] loop4: detected capacity change from 0 to 512 [ 82.628914][ T4450] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.704367][ T4449] team0: Port device dummy0 removed [ 82.717629][ T27] audit: type=1326 audit(1758495533.166:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 82.753450][ T4450] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 82.793223][ T4450] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.828666][ T27] audit: type=1326 audit(1758495533.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 82.842813][ T4449] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.926734][ T4463] tipc: Started in network mode [ 82.936803][ T4450] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.17: corrupted inode contents [ 82.943469][ T4326] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 82.961001][ T4463] tipc: Node identity 62cdcc282295, cluster identity 4711 [ 82.968528][ T4463] tipc: Enabled bearer , priority 0 [ 82.975964][ T27] audit: type=1326 audit(1758495533.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 82.995779][ T4462] tipc: Resetting bearer [ 83.020008][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.026673][ T4450] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #16: comm syz.4.17: mark_inode_dirty error [ 83.059817][ T4326] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.071419][ T4461] tipc: Disabling bearer [ 83.080949][ T27] audit: type=1326 audit(1758495533.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.114657][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.172793][ T4450] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.17: corrupted inode contents [ 83.237162][ T27] audit: type=1326 audit(1758495533.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.270247][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.280948][ T4450] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.17: mark_inode_dirty error [ 83.332616][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.341076][ T4450] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.17: corrupted inode contents [ 83.391750][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.398416][ T4450] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 83.424110][ T27] audit: type=1326 audit(1758495533.236:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.481305][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.517169][ T4450] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.17: corrupted inode contents [ 83.531906][ T27] audit: type=1326 audit(1758495533.236:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.613457][ T4478] tipc: Started in network mode [ 83.629037][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.638793][ T27] audit: type=1326 audit(1758495533.236:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.670217][ T4478] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 83.686083][ T4450] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.17: mark_inode_dirty error [ 83.708442][ T4478] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 83.719044][ T4478] tipc: Enabled bearer , priority 10 [ 83.740658][ T27] audit: type=1326 audit(1758495533.236:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.773579][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.800398][ T4450] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 83.841538][ T4450] EXT4-fs (loop4): Remounting filesystem read-only [ 83.861373][ T27] audit: type=1326 audit(1758495533.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 83.895845][ T4450] EXT4-fs (loop4): 1 truncate cleaned up [ 83.950887][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 1 [ 84.018699][ T9] EXT4-fs (loop4): Remounting filesystem read-only [ 84.035615][ T4485] netlink: 'syz.2.26': attribute type 9 has an invalid length. [ 84.064220][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.073766][ T4485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'. [ 84.364936][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 84.560920][ T4492] loop0: detected capacity change from 0 to 4096 [ 84.681194][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.822362][ T4506] loop2: detected capacity change from 0 to 128 [ 84.841155][ T26] tipc: Node number set to 1 [ 85.047911][ T4510] tipc: Started in network mode [ 85.068277][ T4510] tipc: Node identity 729d69531a18, cluster identity 4711 [ 85.086668][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 85.117540][ T4510] tipc: Enabled bearer , priority 0 [ 85.462266][ T4513] syz.2.33: attempt to access beyond end of device [ 85.462266][ T4513] loop2: rw=2049, sector=417, nr_sectors = 624 limit=128 [ 85.944999][ T4519] tipc: Resetting bearer [ 86.030869][ T4509] tipc: Disabling bearer [ 86.122287][ T4506] netlink: 112 bytes leftover after parsing attributes in process `syz.2.33'. [ 86.235717][ T4501] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 86.480544][ T4537] tipc: Enabling of bearer rejected, already enabled [ 86.848850][ T4544] loop1: detected capacity change from 0 to 2048 [ 86.920755][ T4544] Alternate GPT is invalid, using primary GPT. [ 86.927406][ T4544] loop1: p1 p2 p3 [ 86.948676][ T4544] loop1: partition table partially beyond EOD, truncated [ 87.826268][ T4563] tipc: Enabled bearer , priority 0 [ 88.104420][ T4563] tipc: Resetting bearer [ 88.218323][ T4561] tipc: Disabling bearer [ 88.464539][ T4577] loop3: detected capacity change from 0 to 512 [ 88.479177][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 88.517696][ T4439] udevd[4439]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 88.545574][ T4280] udevd[4280]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 88.566790][ T4577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.616262][ T4577] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.776816][ T27] kauditd_printk_skb: 101 callbacks suppressed [ 88.776833][ T27] audit: type=1326 audit(1758495539.226:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 88.884920][ T4591] loop2: detected capacity change from 0 to 512 [ 88.910150][ T27] audit: type=1326 audit(1758495539.276:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 88.960911][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 89.000099][ T27] audit: type=1326 audit(1758495539.286:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 89.341459][ T27] audit: type=1326 audit(1758495539.286:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 89.366194][ T27] audit: type=1326 audit(1758495539.286:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.002069][ T27] audit: type=1326 audit(1758495539.286:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.104504][ T27] audit: type=1326 audit(1758495539.286:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.132677][ T27] audit: type=1326 audit(1758495539.286:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.169812][ T27] audit: type=1326 audit(1758495539.286:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.231381][ T27] audit: type=1326 audit(1758495539.286:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4585 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 90.389343][ T4615] tipc: Started in network mode [ 90.394628][ T4326] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 90.411248][ T4615] tipc: Node identity 66c583ffddec, cluster identity 4711 [ 90.418527][ T4615] tipc: Enabled bearer , priority 0 [ 90.423657][ T4326] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 90.464028][ T4326] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 90.468573][ T4615] tipc: Resetting bearer [ 90.495237][ T4326] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 90.513902][ T4613] tipc: Disabling bearer [ 90.763803][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 90.844846][ T4630] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 90.857594][ T4624] fido_id[4624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.878076][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.085918][ T4639] loop2: detected capacity change from 0 to 256 [ 91.251410][ T4641] loop1: detected capacity change from 0 to 1024 [ 91.390842][ T4641] ======================================================= [ 91.390842][ T4641] WARNING: The mand mount option has been deprecated and [ 91.390842][ T4641] and is ignored by this kernel. Remove the mand [ 91.390842][ T4641] option from the mount to silence this warning. [ 91.390842][ T4641] ======================================================= [ 92.158497][ T4641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.202835][ T4641] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.77: Allocating blocks 465-513 which overlap fs metadata [ 92.292599][ T4641] EXT4-fs (loop1): pa ffff888073a30620: logic 256, phys. 369, len 9 [ 92.301174][ T4641] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 3 [ 92.380670][ T4641] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 92.506715][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 92.653675][ T4657] loop2: detected capacity change from 0 to 1024 [ 92.685925][ T4657] EXT4-fs: Ignoring removed bh option [ 92.742828][ T4659] loop4: detected capacity change from 0 to 1024 [ 92.759743][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.846856][ T4268] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.954584][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 93.075347][ T4670] tipc: Started in network mode [ 93.090438][ T4670] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 93.166779][ T4670] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 93.198598][ T4670] tipc: Enabled bearer , priority 10 [ 93.254499][ T4674] loop2: detected capacity change from 0 to 1024 [ 94.010176][ T4674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.814193][ T4338] tipc: Node number set to 1 [ 94.943617][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 94.943748][ T27] audit: type=1804 audit(1758495545.386:158): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.87" name="/newroot/14/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 95.074623][ T4689] tipc: Enabling of bearer rejected, failed to enable media [ 95.766760][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 96.132178][ T4718] loop3: detected capacity change from 0 to 1024 [ 96.162361][ T4718] EXT4-fs: Ignoring removed bh option [ 96.269790][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.587797][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 96.729984][ T4732] loop4: detected capacity change from 0 to 128 [ 98.647011][ T4438] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.658544][ T27] audit: type=1326 audit(1758495549.106:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec98ec29 code=0x7ffc0000 [ 98.696350][ T4737] loop0: detected capacity change from 0 to 512 [ 98.722312][ T4738] tipc: Enabling of bearer rejected, failed to enable media [ 98.760987][ T27] audit: type=1326 audit(1758495549.106:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec98ec29 code=0x7ffc0000 [ 98.897925][ T27] audit: type=1326 audit(1758495549.106:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f4dec98ec29 code=0x7ffc0000 [ 98.909987][ T4737] EXT4-fs warning (device loop0): ext4_xattr_inode_get:509: inode #11: comm syz.0.108: EA inode hash validation failed [ 99.041704][ T27] audit: type=1326 audit(1758495549.106:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec98ec29 code=0x7ffc0000 [ 99.102496][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.108: corrupted inode contents [ 99.197125][ T4737] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #15: comm syz.0.108: mark_inode_dirty error [ 99.239471][ T27] audit: type=1326 audit(1758495549.106:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dec98ec29 code=0x7ffc0000 [ 99.273246][ T4737] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.108: corrupted inode contents [ 99.641348][ T4737] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2963: inode #15: comm syz.0.108: mark_inode_dirty error [ 99.990046][ T4737] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2966: inode #15: comm syz.0.108: mark inode dirty (error -117) [ 100.114710][ T4737] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 100.220155][ T4737] EXT4-fs (loop0): 1 orphan inode deleted [ 100.251079][ T27] audit: type=1326 audit(1758495550.706:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.273825][ T4737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.436008][ T27] audit: type=1326 audit(1758495550.746:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.616516][ T4759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.114'. [ 100.622240][ T27] audit: type=1326 audit(1758495550.746:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.648439][ T27] audit: type=1326 audit(1758495550.746:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.697003][ T27] audit: type=1326 audit(1758495550.746:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.738145][ T4737] 9pnet_fd: Insufficient options for proto=fd [ 100.802498][ T27] audit: type=1326 audit(1758495550.746:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.845510][ T27] audit: type=1326 audit(1758495550.746:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 100.978928][ T4769] loop2: detected capacity change from 0 to 128 [ 100.995109][ T27] audit: type=1326 audit(1758495550.776:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 101.119936][ T27] audit: type=1326 audit(1758495550.776:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 101.262165][ T27] audit: type=1326 audit(1758495550.776:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 101.285611][ T4780] device bridge0 entered promiscuous mode [ 101.301022][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 101.342522][ T4780] device macsec1 entered promiscuous mode [ 101.388873][ T4780] bridge0: port 3(macsec1) entered blocking state [ 101.429761][ T4780] bridge0: port 3(macsec1) entered disabled state [ 101.468718][ T4780] device bridge0 left promiscuous mode [ 101.578987][ T4787] tipc: Enabling of bearer rejected, failed to enable media [ 102.103359][ T4801] loop4: detected capacity change from 0 to 128 [ 102.374430][ T4809] capability: warning: `syz.2.131' uses deprecated v2 capabilities in a way that may be insecure [ 102.387030][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.127'. [ 102.391516][ T4806] syz.4.127: attempt to access beyond end of device [ 102.391516][ T4806] loop4: rw=2049, sector=809, nr_sectors = 232 limit=128 [ 102.406213][ T4801] netlink: 72 bytes leftover after parsing attributes in process `syz.4.127'. [ 102.664669][ T4817] loop0: detected capacity change from 0 to 164 [ 102.758822][ T4817] process 'syz.0.133' launched '/dev/fd/-1' with NULL argv: empty string added [ 103.039600][ T4822] loop4: detected capacity change from 0 to 764 [ 103.132780][ T4438] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.255632][ T4829] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 103.255632][ T4829] The task syz.4.135 (4829) triggered the difference, watch for misbehavior. [ 103.420938][ T4822] loop4: detected capacity change from 0 to 164 [ 103.465651][ T4835] loop3: detected capacity change from 0 to 1024 [ 103.469560][ T4822] syz.4.135: attempt to access beyond end of device [ 103.469560][ T4822] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 103.495142][ T4835] EXT4-fs: Ignoring removed bh option [ 103.535250][ T4822] syz.4.135: attempt to access beyond end of device [ 103.535250][ T4822] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 103.632528][ T4835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.867898][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 104.281784][ T4859] loop4: detected capacity change from 0 to 512 [ 104.372908][ T4859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.503299][ T4864] loop3: detected capacity change from 0 to 512 [ 104.511042][ T4865] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 104.542939][ T4864] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 106.032538][ T4842] tipc: Enabling of bearer rejected, failed to enable media [ 106.101974][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 106.480076][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 106.480092][ T27] audit: type=1326 audit(1758495556.916:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 106.620090][ T27] audit: type=1326 audit(1758495556.916:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 106.729528][ T27] audit: type=1326 audit(1758495556.916:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8a478d590 code=0x7ffc0000 [ 106.847514][ T27] audit: type=1326 audit(1758495556.916:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8a478d590 code=0x7ffc0000 [ 106.881745][ T4884] loop0: detected capacity change from 0 to 1024 [ 106.908295][ T4884] EXT4-fs: Ignoring removed nobh option [ 106.930348][ T4884] ext4: Unknown parameter 'appraise_type' [ 106.949977][ T27] audit: type=1326 audit(1758495556.916:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 106.988296][ T4890] loop3: detected capacity change from 0 to 1024 [ 107.026890][ T4890] EXT4-fs: Ignoring removed bh option [ 107.052110][ T27] audit: type=1326 audit(1758495556.916:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 107.111070][ T4892] loop4: detected capacity change from 0 to 128 [ 107.138141][ T27] audit: type=1326 audit(1758495556.916:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 107.151990][ T4890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.167480][ T27] audit: type=1326 audit(1758495556.916:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 107.193749][ T27] audit: type=1326 audit(1758495556.916:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4872 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a478ec29 code=0x7ffc0000 [ 107.220598][ T27] audit: type=1326 audit(1758495557.176:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4880 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3a18ec29 code=0x7ffc0000 [ 107.238410][ T4892] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 107.340171][ T4892] FAT-fs (loop4): Filesystem has been set read-only [ 107.360557][ T4892] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 107.410668][ T4892] syz.4.158: attempt to access beyond end of device [ 107.410668][ T4892] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 107.422626][ T4899] tipc: Enabled bearer , priority 0 [ 107.486035][ T4899] device syzkaller0 entered promiscuous mode [ 107.552316][ T4899] tipc: Resetting bearer [ 107.758797][ T4906] loop0: detected capacity change from 0 to 128 [ 107.788879][ T4898] tipc: Resetting bearer [ 107.795850][ T4906] FAT-fs (loop0): Directory bread(block 162) failed [ 107.828409][ T4906] FAT-fs (loop0): Directory bread(block 163) failed [ 107.836416][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 107.869569][ T4898] tipc: Disabling bearer [ 107.899567][ T4906] FAT-fs (loop0): Directory bread(block 164) failed [ 107.930966][ T4906] FAT-fs (loop0): Directory bread(block 165) failed [ 107.937655][ T4906] FAT-fs (loop0): Directory bread(block 166) failed [ 107.987645][ T4906] FAT-fs (loop0): Directory bread(block 167) failed [ 108.005701][ T4906] FAT-fs (loop0): Directory bread(block 168) failed [ 108.041234][ T4906] FAT-fs (loop0): Directory bread(block 169) failed [ 108.081610][ T4906] FAT-fs (loop0): Directory bread(block 162) failed [ 108.132223][ T4910] loop3: detected capacity change from 0 to 128 [ 108.179647][ T4906] FAT-fs (loop0): Directory bread(block 163) failed [ 108.187932][ T4906] syz.0.165: attempt to access beyond end of device [ 108.187932][ T4906] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 108.202868][ T4906] syz.0.165: attempt to access beyond end of device [ 108.202868][ T4906] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 108.229577][ T4910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 108.914352][ T4916] syz.4.163 (4916) used greatest stack depth: 17856 bytes left [ 108.976421][ T4910] FAT-fs (loop3): Filesystem has been set read-only [ 109.056835][ T4910] syz.3.161: attempt to access beyond end of device [ 109.056835][ T4910] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 109.186885][ T4910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.256127][ T4910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.312300][ T4910] syz.3.161: attempt to access beyond end of device [ 109.312300][ T4910] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.389196][ T4910] syz.3.161: attempt to access beyond end of device [ 109.389196][ T4910] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.457489][ T4929] device pim6reg1 entered promiscuous mode [ 109.466354][ T4925] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.533039][ T4925] syz.3.161: attempt to access beyond end of device [ 109.533039][ T4925] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 109.599236][ T4925] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.625492][ T4925] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 109.871336][ T4935] loop1: detected capacity change from 0 to 1024 [ 109.905457][ T4935] EXT4-fs: Ignoring removed bh option [ 110.085287][ T4935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.476548][ T4955] loop4: detected capacity change from 0 to 1024 [ 110.501158][ T4955] EXT4-fs: Ignoring removed bh option [ 110.592887][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.740926][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 110.764790][ T4955] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 110.946970][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 111.626849][ T4982] loop3: detected capacity change from 0 to 1024 [ 111.669041][ T4982] EXT4-fs: Ignoring removed bh option [ 111.832774][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.993059][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 112.137057][ T4996] loop1: detected capacity change from 0 to 1024 [ 112.206917][ T4996] EXT4-fs: Ignoring removed bh option [ 112.292240][ T4996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.442538][ T4996] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 112.633456][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 112.993154][ T5023] device pim6reg1 entered promiscuous mode [ 113.053641][ T5025] loop4: detected capacity change from 0 to 1024 [ 113.155409][ T5025] EXT4-fs: Ignoring removed bh option [ 113.276215][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.438369][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 113.750676][ T5044] loop0: detected capacity change from 0 to 1024 [ 113.791847][ T5044] EXT4-fs: Ignoring removed bh option [ 113.971913][ T5044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.110041][ T5056] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 114.418079][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 114.433400][ T5051] device pim6reg1 entered promiscuous mode [ 114.799931][ T5072] loop4: detected capacity change from 0 to 1024 [ 114.819048][ T5072] EXT4-fs: Ignoring removed bh option [ 114.905151][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.092108][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 115.240817][ T5085] device wg2 entered promiscuous mode [ 115.330637][ T5088] device pim6reg1 entered promiscuous mode [ 115.626788][ T5095] loop3: detected capacity change from 0 to 1024 [ 115.711311][ T5095] EXT4-fs: Ignoring removed bh option [ 115.730534][ T5099] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 115.812522][ T5095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.978121][ T5095] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 116.083017][ T5112] loop0: detected capacity change from 0 to 1024 [ 116.122266][ T5112] EXT4-fs: Ignoring removed bh option [ 116.167448][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 116.201697][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.440578][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 117.044735][ T5146] loop3: detected capacity change from 0 to 1024 [ 117.095162][ T5146] EXT4-fs: Ignoring removed bh option [ 117.166946][ T5146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.266251][ T5146] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 117.434619][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 117.700581][ T5159] device wg2 entered promiscuous mode [ 117.707633][ T5158] device wg2 entered promiscuous mode [ 117.955163][ T5168] device pim6reg1 entered promiscuous mode [ 118.403533][ T5184] loop0: detected capacity change from 0 to 1024 [ 118.438757][ T5184] EXT4-fs: Ignoring removed bh option [ 118.511093][ T5184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.657885][ T5184] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 118.760802][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 119.193915][ T5209] device pim6reg1 entered promiscuous mode [ 119.505059][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 121.197191][ T5229] loop1: detected capacity change from 0 to 512 [ 121.279784][ T5229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.401619][ T5229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.489323][ T5229] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.520976][ T5211] team0 (unregistering): Port device team_slave_0 removed [ 121.625148][ T5211] team0 (unregistering): Port device team_slave_1 removed [ 121.836024][ T5216] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 121.856270][ T5216] tipc: Enabled bearer , priority 10 [ 121.993375][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 122.216440][ T5240] tipc: Enabled bearer , priority 0 [ 122.282468][ T5243] device syzkaller0 entered promiscuous mode [ 122.311933][ T5239] device pim6reg1 entered promiscuous mode [ 122.579595][ T5253] loop2: detected capacity change from 0 to 1024 [ 122.595499][ T5253] EXT4-fs: Ignoring removed bh option [ 122.636592][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.683054][ T5253] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 122.836349][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 122.888170][ T5243] tipc: Resetting bearer [ 122.933142][ T5237] tipc: Resetting bearer [ 123.143462][ T5237] tipc: Disabling bearer [ 123.260114][ T4326] tipc: Node number set to 1753573715 [ 123.865661][ T5267] loop1: detected capacity change from 0 to 512 [ 123.950715][ T5267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.144033][ T5267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.186200][ T5267] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.274684][ T5271] tipc: Enabling of bearer rejected, already enabled [ 125.181123][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 125.361815][ T5282] loop4: detected capacity change from 0 to 1024 [ 125.421229][ T5282] EXT4-fs: Ignoring removed bh option [ 125.618353][ T5283] loop0: detected capacity change from 0 to 1024 [ 125.678874][ T5283] EXT4-fs: Ignoring removed bh option [ 125.776464][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.853193][ T5282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.934542][ T5283] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 126.175988][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 126.192708][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 126.427959][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 126.485719][ T5308] loop2: detected capacity change from 0 to 512 [ 126.533059][ T5308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.649779][ T5308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.670009][ T5308] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.761644][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 127.906797][ T5326] tipc: Enabling of bearer rejected, already enabled [ 128.109435][ T5329] loop1: detected capacity change from 0 to 1024 [ 128.139469][ T5329] EXT4-fs: Ignoring removed bh option [ 128.247769][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.101053][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 130.240793][ T5368] loop0: detected capacity change from 0 to 512 [ 130.273200][ T5368] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.374804][ T5368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.430291][ T5368] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.508366][ T5375] syz.4.330[5375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.508559][ T5375] syz.4.330[5375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.998029][ T5356] tipc: Enabling of bearer rejected, failed to enable media [ 132.024390][ T5362] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 132.100925][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 132.385090][ T5385] loop2: detected capacity change from 0 to 1024 [ 132.425856][ T5385] EXT4-fs: Ignoring removed bh option [ 132.561627][ T5385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.686301][ T5389] loop3: detected capacity change from 0 to 1024 [ 132.741555][ T5389] EXT4-fs: Ignoring removed bh option [ 132.750679][ T5385] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 132.787701][ T5389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.814195][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820664][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.576135][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 133.812390][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 134.835333][ T5421] device sit0 entered promiscuous mode [ 135.247792][ T5438] loop2: detected capacity change from 0 to 1024 [ 135.457996][ T5438] EXT4-fs: Ignoring removed bh option [ 136.730479][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.732310][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 139.612325][ T5501] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.639673][ T5501] tipc: Enabled bearer , priority 10 [ 140.123897][ T5508] loop1: detected capacity change from 0 to 1024 [ 140.132548][ T5508] EXT4-fs: Ignoring removed bh option [ 140.371128][ T5508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.707505][ T5508] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 141.501751][ T4311] tipc: Node number set to 1079561256 [ 141.575172][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 142.101972][ T5530] device pim6reg1 entered promiscuous mode [ 142.273898][ T5536] tipc: Enabling of bearer rejected, already enabled [ 143.285074][ T5544] device pim6reg1 entered promiscuous mode [ 144.587672][ T5569] tipc: Enabling of bearer rejected, already enabled [ 145.122933][ T5585] device pim6reg1 entered promiscuous mode [ 145.620139][ T5599] tipc: Enabling of bearer rejected, failed to enable media [ 147.093326][ T5642] device wg2 entered promiscuous mode [ 148.401358][ T5650] tipc: Enabling of bearer rejected, failed to enable media [ 148.466109][ T5654] loop2: detected capacity change from 0 to 1024 [ 148.474290][ T5654] EXT4-fs: Ignoring removed bh option [ 148.575477][ T5654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.671187][ T5654] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 148.843888][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 149.118671][ T5670] device pim6reg1 entered promiscuous mode [ 151.222032][ T5708] tipc: Enabling of bearer rejected, failed to enable media [ 151.296900][ T5712] [ 151.299298][ T5712] ====================================================== [ 151.306340][ T5712] WARNING: possible circular locking dependency detected [ 151.313373][ T5712] syzkaller #0 Not tainted [ 151.317905][ T5712] ------------------------------------------------------ [ 151.324929][ T5712] syz.4.455/5712 is trying to acquire lock: [ 151.330822][ T5712] ffff8880b8e281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 151.339543][ T5712] [ 151.339543][ T5712] but task is already holding lock: [ 151.346905][ T5712] ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 151.355794][ T5712] [ 151.355794][ T5712] which lock already depends on the new lock. [ 151.355794][ T5712] [ 151.366277][ T5712] [ 151.366277][ T5712] the existing dependency chain (in reverse order) is: [ 151.375285][ T5712] [ 151.375285][ T5712] -> #1 (&base->lock){-.-.}-{2:2}: [ 151.382674][ T5712] _raw_spin_lock_irqsave+0xa4/0xf0 [ 151.388421][ T5712] lock_timer_base+0x123/0x270 [ 151.393827][ T5712] __mod_timer+0x117/0xd20 [ 151.398872][ T5712] queue_delayed_work_on+0x126/0x1e0 [ 151.404700][ T5712] kvfree_call_rcu+0x4cb/0x870 [ 151.410001][ T5712] rtnl_register_internal+0x489/0x590 [ 151.415993][ T5712] rtnl_register+0x2e/0x70 [ 151.420940][ T5712] ip_rt_init+0x323/0x3b5 [ 151.425802][ T5712] ip_init+0xa/0x14 [ 151.430140][ T5712] inet_init+0x2bd/0x3cf [ 151.435002][ T5712] do_one_initcall+0x214/0x7a0 [ 151.440380][ T5712] do_initcall_level+0x137/0x1e4 [ 151.445950][ T5712] do_initcalls+0x4b/0x8a [ 151.450827][ T5712] kernel_init_freeable+0x3fa/0x5ac [ 151.456579][ T5712] kernel_init+0x19/0x1b0 [ 151.461469][ T5712] ret_from_fork+0x1f/0x30 [ 151.466519][ T5712] [ 151.466519][ T5712] -> #0 (krc.lock){..-.}-{2:2}: [ 151.473579][ T5712] __lock_acquire+0x2cf8/0x7c50 [ 151.478967][ T5712] lock_acquire+0x1b4/0x490 [ 151.484003][ T5712] _raw_spin_lock+0x2a/0x40 [ 151.489049][ T5712] kvfree_call_rcu+0x184/0x870 [ 151.494350][ T5712] trie_delete_elem+0x52d/0x690 [ 151.499740][ T5712] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 151.505813][ T5712] bpf_trace_run3+0x1e3/0x400 [ 151.511021][ T5712] __traceiter_timer_start+0x73/0xc0 [ 151.516834][ T5712] enqueue_timer+0x411/0x5c0 [ 151.521944][ T5712] __mod_timer+0x8e1/0xd20 [ 151.526908][ T5712] sk_reset_timer+0x1f/0xb0 [ 151.531942][ T5712] tipc_sk_finish_conn+0x154/0x7e0 [ 151.537783][ T5712] tipc_socketpair+0x250/0x470 [ 151.543089][ T5712] __sys_socketpair+0x2ac/0x540 [ 151.548548][ T5712] __x64_sys_socketpair+0x97/0xb0 [ 151.554195][ T5712] do_syscall_64+0x4c/0xa0 [ 151.559157][ T5712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.565576][ T5712] [ 151.565576][ T5712] other info that might help us debug this: [ 151.565576][ T5712] [ 151.575816][ T5712] Possible unsafe locking scenario: [ 151.575816][ T5712] [ 151.583372][ T5712] CPU0 CPU1 [ 151.588758][ T5712] ---- ---- [ 151.594133][ T5712] lock(&base->lock); [ 151.598267][ T5712] lock(krc.lock); [ 151.604626][ T5712] lock(&base->lock); [ 151.611225][ T5712] lock(krc.lock); [ 151.615047][ T5712] [ 151.615047][ T5712] *** DEADLOCK *** [ 151.615047][ T5712] [ 151.623282][ T5712] 2 locks held by syz.4.455/5712: [ 151.628393][ T5712] #0: ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 151.637724][ T5712] #1: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 151.647057][ T5712] [ 151.647057][ T5712] stack backtrace: [ 151.652951][ T5712] CPU: 0 PID: 5712 Comm: syz.4.455 Not tainted syzkaller #0 [ 151.660321][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.670399][ T5712] Call Trace: [ 151.673701][ T5712] [ 151.676852][ T5712] dump_stack_lvl+0x168/0x22e [ 151.681550][ T5712] ? load_image+0x3b0/0x3b0 [ 151.686098][ T5712] ? show_regs_print_info+0x12/0x12 [ 151.691308][ T5712] ? print_circular_bug+0x12b/0x1a0 [ 151.696549][ T5712] check_noncircular+0x274/0x310 [ 151.701517][ T5712] ? add_chain_block+0x940/0x940 [ 151.706488][ T5712] ? lockdep_lock+0xdc/0x1e0 [ 151.711103][ T5712] ? _find_first_zero_bit+0xcf/0x100 [ 151.716414][ T5712] __lock_acquire+0x2cf8/0x7c50 [ 151.721374][ T5712] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.727469][ T5712] ? verify_lock_unused+0x140/0x140 [ 151.732689][ T5712] ? kasan_save_stack+0x4c/0x60 [ 151.737554][ T5712] ? kasan_save_stack+0x3a/0x60 [ 151.742410][ T5712] ? __kasan_record_aux_stack+0xb2/0xc0 [ 151.747965][ T5712] ? kvfree_call_rcu+0x108/0x870 [ 151.752914][ T5712] ? trie_delete_elem+0x52d/0x690 [ 151.757944][ T5712] ? bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 151.763578][ T5712] ? bpf_trace_run3+0x1e3/0x400 [ 151.768442][ T5712] ? __traceiter_timer_start+0x73/0xc0 [ 151.773958][ T5712] ? enqueue_timer+0x411/0x5c0 [ 151.778724][ T5712] ? __mod_timer+0x8e1/0xd20 [ 151.783341][ T5712] ? sk_reset_timer+0x1f/0xb0 [ 151.788111][ T5712] ? tipc_sk_finish_conn+0x154/0x7e0 [ 151.793402][ T5712] ? tipc_socketpair+0x250/0x470 [ 151.798387][ T5712] ? __sys_socketpair+0x2ac/0x540 [ 151.803435][ T5712] ? __x64_sys_socketpair+0x97/0xb0 [ 151.808822][ T5712] ? do_syscall_64+0x4c/0xa0 [ 151.813426][ T5712] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.819508][ T5712] lock_acquire+0x1b4/0x490 [ 151.824028][ T5712] ? kvfree_call_rcu+0x184/0x870 [ 151.828977][ T5712] ? read_lock_is_recursive+0x10/0x10 [ 151.834359][ T5712] ? __phys_addr+0xb6/0x170 [ 151.839141][ T5712] _raw_spin_lock+0x2a/0x40 [ 151.843676][ T5712] ? kvfree_call_rcu+0x184/0x870 [ 151.848716][ T5712] kvfree_call_rcu+0x184/0x870 [ 151.853503][ T5712] ? rcu_leak_callback+0x10/0x10 [ 151.858462][ T5712] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.864385][ T5712] ? _raw_spin_unlock+0x40/0x40 [ 151.869252][ T5712] trie_delete_elem+0x52d/0x690 [ 151.874290][ T5712] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 151.879751][ T5712] bpf_trace_run3+0x1e3/0x400 [ 151.884454][ T5712] ? bpf_trace_run3+0xf0/0x400 [ 151.889237][ T5712] ? bpf_trace_run2+0x3b0/0x3b0 [ 151.894189][ T5712] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.900182][ T5712] ? _raw_spin_unlock+0x40/0x40 [ 151.905055][ T5712] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 151.910456][ T5712] ? __bpf_trace_timer_class+0x20/0x20 [ 151.916029][ T5712] __traceiter_timer_start+0x73/0xc0 [ 151.921444][ T5712] enqueue_timer+0x411/0x5c0 [ 151.926134][ T5712] __mod_timer+0x8e1/0xd20 [ 151.930568][ T5712] sk_reset_timer+0x1f/0xb0 [ 151.935095][ T5712] tipc_sk_finish_conn+0x154/0x7e0 [ 151.940224][ T5712] tipc_socketpair+0x250/0x470 [ 151.944997][ T5712] __sys_socketpair+0x2ac/0x540 [ 151.949881][ T5712] __x64_sys_socketpair+0x97/0xb0 [ 151.954913][ T5712] do_syscall_64+0x4c/0xa0 [ 151.959420][ T5712] ? clear_bhb_loop+0x60/0xb0 [ 151.964109][ T5712] ? clear_bhb_loop+0x60/0xb0 [ 151.968794][ T5712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.974693][ T5712] RIP: 0033:0x7fca3a18ec29 [ 151.979121][ T5712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.998759][ T5712] RSP: 002b:00007fca3afa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 152.007187][ T5712] RAX: ffffffffffffffda RBX: 00007fca3a3d5fa0 RCX: 00007fca3a18ec29 [ 152.015167][ T5712] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 152.023157][ T5712] RBP: 00007fca3a211e41 R08: 0000000000000000 R09: 0000000000000000 [ 152.031152][ T5712] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 152.039134][ T5712] R13: 00007fca3a3d6038 R14: 00007fca3a3d5fa0 R15: 00007ffe023dc848 [ 152.047213][ T5712]