last executing test programs: 4.357047979s ago: executing program 2 (id=125): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) msgget(0x3, 0x710) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000001540)={0xb, 0x9, 0x5, 0x7fffffff, 0x3, "5f73f3cccd22890348a63fe3ea52426448b90d", 0x9, 0x80000001}) unshare(0x2a020400) bind$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x3, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) msgget(0x2, 0x624) msgget(0x1, 0x240) gettid() msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001080)={@local, 0x0, 0x0, 0x4d8e71710c799d51, 0x0, 0x7, 0x1}, &(0x7f00000010c0)=0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14, 0x0, 0xfd, 0x5}, {0x2c, 0xfe, 0x1}, {0x6, 0x0, 0x4}]}) unshare(0x40300) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) msgget(0x0, 0x200) 3.746577218s ago: executing program 0 (id=133): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x8, 0x4, 0x5, 0x972d, 0x3, 0x3fb, 0x8, 0x3]}}) 3.644158919s ago: executing program 0 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0x48, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 3.62783858s ago: executing program 0 (id=135): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x6a, 0xd3, 0x60, 0x8, 0x4da, 0x390d, 0x3ecc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x8, 0xd0, 0xb, [{{0x9, 0x4, 0xd1, 0xbd, 0x0, 0x7b, 0x80, 0x3a, 0x4}}]}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7733, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.332237463s ago: executing program 2 (id=137): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c56", 0x10}], 0x1) 3.304389724s ago: executing program 2 (id=138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x4f) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 3.262027504s ago: executing program 2 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 2.619133733s ago: executing program 2 (id=145): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000341301, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0x8000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2.520229275s ago: executing program 2 (id=146): socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x105042, 0x1db) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.507379765s ago: executing program 4 (id=147): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)={0x38, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="00b306e087"]}, 0x38}], 0x1}, 0x0) 2.376136817s ago: executing program 4 (id=149): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.000070483s ago: executing program 4 (id=153): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.777448605s ago: executing program 4 (id=155): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffff, 0x936e, 0x1, 0x2efc, 0x2}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) 1.668190087s ago: executing program 1 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 1.635588627s ago: executing program 4 (id=158): r0 = socket(0x840000000002, 0x3, 0xfa) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x2}, 0xfd}, 0x18) 1.539943558s ago: executing program 1 (id=160): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg$inet_sctp(r0, &(0x7f0000001340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="140000008400000005000008"], 0x14, 0x4000}], 0x1, 0x800) 1.517858539s ago: executing program 4 (id=161): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.48042014s ago: executing program 3 (id=162): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x6, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x0) 1.4320182s ago: executing program 1 (id=163): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 451.410444ms ago: executing program 3 (id=164): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 285.939496ms ago: executing program 1 (id=168): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000fe0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988fe0f00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 258.585517ms ago: executing program 0 (id=169): bpf$MAP_CREATE(0x0, 0x0, 0x50) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) unshare(0x40600) r4 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0xdc0f55bf57d7134a, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@bridge_getneigh={0xc4, 0x1e, 0x2, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40a08, 0x120}, [@IFLA_MAP={0x20, 0xe, {0x3, 0x8, 0x8000000000000001, 0x8001, 0x5, 0xf6}}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}]}, @IFLA_MASTER={0x8}]}, 0xc4}, 0x1, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0xa0}}, 0x0) 156.308948ms ago: executing program 3 (id=170): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x4d, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 121.807578ms ago: executing program 3 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xe600}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 81.745679ms ago: executing program 0 (id=172): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}}}, 0xe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 235.38µs ago: executing program 1 (id=173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) read$alg(r0, &(0x7f00000000c0)=""/235, 0xeb) 0s ago: executing program 3 (id=174): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@link_local, @dev, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}, {[@noop, @rr={0x7, 0xf, 0x2e, [@empty, @empty, @local]}, @rr={0x7, 0xb, 0x46, [@local, @empty]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x62, [@broadcast]}]}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 41.147856][ T4025] cgroup: Unknown subsys name 'net' [ 41.373236][ T4025] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.746795][ T4025] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.339067][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 43.403853][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 43.428977][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 43.487541][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.489700][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.492832][ T4039] device bridge_slave_0 entered promiscuous mode [ 43.514063][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 43.530797][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.532818][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.535598][ T4039] device bridge_slave_1 entered promiscuous mode [ 43.539019][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 43.574536][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.578009][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.580814][ T4043] device bridge_slave_0 entered promiscuous mode [ 43.611363][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.613469][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.616086][ T4043] device bridge_slave_1 entered promiscuous mode [ 43.632539][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.657352][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.673642][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.712080][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.727035][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.729176][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.732132][ T4035] device bridge_slave_0 entered promiscuous mode [ 43.741663][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.743703][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.747080][ T4044] device bridge_slave_0 entered promiscuous mode [ 43.777055][ T4039] team0: Port device team_slave_0 added [ 43.781073][ T4043] team0: Port device team_slave_0 added [ 43.782975][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.785089][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.789137][ T4035] device bridge_slave_1 entered promiscuous mode [ 43.791596][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.793630][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.797284][ T4044] device bridge_slave_1 entered promiscuous mode [ 43.800150][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.802276][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.805058][ T4042] device bridge_slave_0 entered promiscuous mode [ 43.815813][ T4043] team0: Port device team_slave_1 added [ 43.818883][ T4039] team0: Port device team_slave_1 added [ 43.845707][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.847958][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.850727][ T4042] device bridge_slave_1 entered promiscuous mode [ 43.888426][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.890463][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.897980][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.903985][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.909770][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.921091][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.929546][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.931501][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.938855][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.942850][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.944802][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.952527][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.963399][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.971986][ T4035] team0: Port device team_slave_0 added [ 43.975635][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.978970][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.980811][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.989026][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.002626][ T4035] team0: Port device team_slave_1 added [ 44.005898][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.053086][ T4044] team0: Port device team_slave_0 added [ 44.059793][ T4044] team0: Port device team_slave_1 added [ 44.062095][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.064034][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.071666][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.077075][ T4042] team0: Port device team_slave_0 added [ 44.079303][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.081252][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.089108][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.117875][ T4042] team0: Port device team_slave_1 added [ 44.178721][ T4039] device hsr_slave_0 entered promiscuous mode [ 44.226767][ T4039] device hsr_slave_1 entered promiscuous mode [ 44.274535][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.276634][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.283783][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.288596][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.290626][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.298454][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.398542][ T4043] device hsr_slave_0 entered promiscuous mode [ 44.446635][ T4043] device hsr_slave_1 entered promiscuous mode [ 44.486399][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.488671][ T4043] Cannot create hsr debugfs directory [ 44.505430][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.507576][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.514812][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.568533][ T4035] device hsr_slave_0 entered promiscuous mode [ 44.606668][ T4035] device hsr_slave_1 entered promiscuous mode [ 44.646437][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.648537][ T4035] Cannot create hsr debugfs directory [ 44.661395][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.663408][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.671301][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.748659][ T4044] device hsr_slave_0 entered promiscuous mode [ 44.786716][ T4044] device hsr_slave_1 entered promiscuous mode [ 44.826415][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.828559][ T4044] Cannot create hsr debugfs directory [ 45.008353][ T4042] device hsr_slave_0 entered promiscuous mode [ 45.026991][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 45.046643][ T4042] device hsr_slave_1 entered promiscuous mode [ 45.096356][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 45.096474][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 45.098517][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 45.101540][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 45.106346][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.108615][ T4042] Cannot create hsr debugfs directory [ 45.271051][ T4039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.323115][ T4039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.358601][ T4039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.411256][ T4039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.484527][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.540265][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.598379][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.670486][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.729962][ T4035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.776406][ T4035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.827802][ T4035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.884000][ T4035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.964866][ T4044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.044635][ T4044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.104687][ T4044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.158359][ T4044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.233081][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.263442][ T4042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.295627][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.302367][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.308770][ T4042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.355689][ T4042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.401401][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.408704][ T4042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.467775][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.470773][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.474064][ T1376] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.476165][ T1376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.483069][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.531825][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.534769][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.544117][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.546360][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.554479][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.559004][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.567821][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.579247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.594510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.598199][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.603572][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.609334][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.618742][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.622910][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.625646][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.631395][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.643040][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.654513][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.658754][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.661683][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.664424][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.667784][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.669786][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.672223][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.674985][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.679692][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.681644][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.684039][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.687377][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.695350][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.705418][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.708446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.711061][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.712982][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.715755][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.719638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.738174][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.740908][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.743707][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.748794][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.753688][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.755726][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.758653][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.777944][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.785609][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.790941][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.794009][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.798467][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.801355][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.804301][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.809116][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.812056][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.827615][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.831582][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.834371][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.837388][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.840226][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.843081][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.845963][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.852283][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.856875][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.861478][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.884885][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.889666][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.892491][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.895213][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.898434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.901299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.904116][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.912669][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.940142][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.942942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.945670][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.947721][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.955704][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.966546][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.969312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.971846][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.973811][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.985436][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.002970][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.018276][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.029585][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.037566][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.049547][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.057821][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.061311][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.069409][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.079211][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.081942][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.087276][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.096651][ T4109] Bluetooth: hci0: command 0x041b tx timeout [ 47.099119][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.102506][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.104634][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.124279][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.128214][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.136131][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.139585][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.142393][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.146058][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.151323][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.154345][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.157675][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.160479][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.162813][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.176788][ T4116] Bluetooth: hci1: command 0x041b tx timeout [ 47.178755][ T4116] Bluetooth: hci2: command 0x041b tx timeout [ 47.180545][ T4116] Bluetooth: hci3: command 0x041b tx timeout [ 47.183965][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.187316][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.189655][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.197874][ T4116] Bluetooth: hci4: command 0x041b tx timeout [ 47.211560][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.213824][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.216020][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.223159][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.232950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.235271][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.243290][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.266518][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.269877][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.273460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.278966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.304146][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.321157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.324501][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.328262][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.331122][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.353453][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.356687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.366990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.369229][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.371420][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.374136][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.394609][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.398274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.411475][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.415188][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.420180][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.428973][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.439959][ T4039] device veth0_vlan entered promiscuous mode [ 47.454841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.457816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.460644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.463755][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.468850][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.471683][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.474326][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.479014][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.484747][ T4035] device veth0_vlan entered promiscuous mode [ 47.518721][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.521746][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.532187][ T4039] device veth1_vlan entered promiscuous mode [ 47.544459][ T4035] device veth1_vlan entered promiscuous mode [ 47.550205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.553124][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.556119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.559908][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.564680][ T4043] device veth0_vlan entered promiscuous mode [ 47.609301][ T4043] device veth1_vlan entered promiscuous mode [ 47.614027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.617404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.619591][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.636153][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.639754][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.642526][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.645649][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.649607][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.660806][ T4039] device veth0_macvtap entered promiscuous mode [ 47.664499][ T4044] device veth0_vlan entered promiscuous mode [ 47.678167][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.680906][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.683493][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.693791][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.700265][ T4039] device veth1_macvtap entered promiscuous mode [ 47.715016][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.718633][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.721528][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.730389][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.735509][ T4044] device veth1_vlan entered promiscuous mode [ 47.755182][ T4035] device veth0_macvtap entered promiscuous mode [ 47.764967][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.768360][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.770946][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.773769][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.779559][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.785309][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.792859][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.799292][ T4039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801890][ T4039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.804369][ T4039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.808955][ T4039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.852906][ T4035] device veth1_macvtap entered promiscuous mode [ 47.864011][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.867863][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.870491][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.873452][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.884638][ T4043] device veth0_macvtap entered promiscuous mode [ 47.908395][ T4043] device veth1_macvtap entered promiscuous mode [ 47.934343][ T4044] device veth0_macvtap entered promiscuous mode [ 47.939868][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.942888][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.948871][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.959872][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.962727][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.965559][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.969495][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.972306][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.975002][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.978322][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.981201][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.985397][ T4044] device veth1_macvtap entered promiscuous mode [ 48.001697][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.004258][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.031514][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.034566][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.039979][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.043932][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.047441][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.050141][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.053057][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.058525][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.068183][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.071048][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.073821][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.078003][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.095733][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.099260][ T4035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.101606][ T4035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.104053][ T4035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.122446][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.125431][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.129047][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.131956][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.134655][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.140290][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.144583][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.150640][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.153494][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.156906][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.159859][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.164016][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.171584][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.174608][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.178311][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.181306][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.184044][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.187552][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.192319][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.195354][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.198923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.201826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.204694][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.205293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.207793][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.210962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.214484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.221495][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.223974][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.231174][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.233597][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.249729][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.252356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.255166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.258963][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.261590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.274809][ T4042] device veth0_vlan entered promiscuous mode [ 48.308067][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.310565][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.312903][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.315213][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.338224][ T1711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.340535][ T1711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.343868][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.367661][ T4042] device veth1_vlan entered promiscuous mode [ 48.448396][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.450770][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.454291][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.462304][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.465020][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.548700][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.551708][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.557594][ T1711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.559854][ T1711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.564266][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.584034][ T4042] device veth0_macvtap entered promiscuous mode [ 48.601085][ T4042] device veth1_macvtap entered promiscuous mode [ 48.616655][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.632725][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.649303][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.651761][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.654792][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.658373][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.661238][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.663865][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.675325][ T4146] netpci0: tun_chr_ioctl cmd 1074812118 [ 48.690710][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.694519][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.709241][ T4146] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 48.714450][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.728682][ T1711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.730942][ T1711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.738010][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.754095][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.764859][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.771586][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.774518][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.782971][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.785910][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.790234][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.793072][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.804981][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.827095][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.829997][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.849271][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.852241][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.854828][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.894255][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.906484][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.909362][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.912007][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.926329][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.933547][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.958658][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.961630][ T1376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.975481][ T4042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.978967][ T4042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984498][ T4042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.990969][ T4042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.146481][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.148844][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.151862][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.184938][ T4143] Bluetooth: hci0: command 0x040f tx timeout [ 49.212584][ T358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.214781][ T358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.225335][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.257398][ T4106] Bluetooth: hci4: command 0x040f tx timeout [ 49.260198][ T4106] Bluetooth: hci3: command 0x040f tx timeout [ 49.261990][ T4106] Bluetooth: hci2: command 0x040f tx timeout [ 49.263699][ T4106] Bluetooth: hci1: command 0x040f tx timeout [ 49.324790][ T4164] udc-core: couldn't find an available UDC or it's busy [ 49.477013][ T4164] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.673252][ T4175] ptrace attach of "./syz-executor exec"[4043] was attempted by "./syz-executor exec"[4175] [ 49.701030][ T4173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10'. [ 50.235095][ T4191] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 50.655525][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 51.256785][ T4106] Bluetooth: hci0: command 0x0419 tx timeout [ 51.337214][ T4106] Bluetooth: hci1: command 0x0419 tx timeout [ 51.346641][ T4106] Bluetooth: hci2: command 0x0419 tx timeout [ 51.349257][ T4106] Bluetooth: hci3: command 0x0419 tx timeout [ 51.351078][ T4106] Bluetooth: hci4: command 0x0419 tx timeout [ 53.047783][ T4243] input: syz0 as /devices/virtual/input/input3 [ 53.446347][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 54.623795][ T4260] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 54.977965][ T4265] tipc: Can't bind to reserved service type 2 [ 55.009324][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 55.496424][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 56.332481][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 56.495278][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 57.424693][ T4310] netlink: 252 bytes leftover after parsing attributes in process `syz.3.54'. [ 57.787085][ T4320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.59'. [ 59.279720][ T4343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 59.280185][ T4342] udc-core: couldn't find an available UDC or it's busy [ 59.284169][ T4342] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.444312][ T4347] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 59.894480][ T4362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'. [ 60.700718][ T4382] 8021q: VLANs not supported on ipvlan1 [ 61.209225][ T4399] netpci0: tun_chr_ioctl cmd 1074812118 [ 61.237396][ T4399] netlink: 'syz.0.85': attribute type 5 has an invalid length. [ 62.062621][ T4410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 62.253343][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 62.286967][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 62.327949][ T26] audit: type=1326 audit(62.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.3.90" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaeaa1ba8 code=0x0 [ 62.434525][ T4419] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.90' resets device [ 64.113469][ T4448] netpci0: tun_chr_ioctl cmd 1074812118 [ 64.168116][ T4455] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 64.245204][ T4458] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 64.615117][ T4478] input: syz0 as /devices/virtual/input/input4 [ 65.365285][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 65.380675][ T26] audit: type=1326 audit(65.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.2.125" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2808ba8 code=0x0 [ 65.516891][ T4513] udc-core: couldn't find an available UDC or it's busy [ 65.518884][ T4513] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.832403][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 66.166519][ T1534] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.273132][ T4540] binder: 4539:4540 ioctl c0306201 0 returned -14 [ 66.335120][ T4541] binder: 4539:4541 ioctl c0306201 0 returned -14 [ 66.406586][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 66.528050][ T1534] usb 1-1: config 129 has an invalid interface number: 209 but max is 0 [ 66.530755][ T1534] usb 1-1: config 129 has no interface number 0 [ 66.532521][ T1534] usb 1-1: config 129 interface 209 has no altsetting 0 [ 66.600220][ T4545] netlink: 252 bytes leftover after parsing attributes in process `syz.3.141'. [ 66.696773][ T1534] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3e.cc [ 66.699800][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.702329][ T1534] usb 1-1: Product: syz [ 66.706611][ T1534] usb 1-1: Manufacturer: syz [ 66.720745][ T1534] usb 1-1: SerialNumber: syz [ 66.750216][ T4547] netlink: 192 bytes leftover after parsing attributes in process `syz.3.142'. [ 67.038598][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 67.522448][ T4571] netlink: 252 bytes leftover after parsing attributes in process `syz.1.152'. [ 67.932893][ T1534] usb 1-1: USB disconnect, device number 2 [ 67.965763][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 68.326850][ T4595] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 69.295985][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.327886][ T4608] device vlan2 entered promiscuous mode [ 69.329499][ T4608] device gretap0 entered promiscuous mode [ 69.368832][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 69.522235][ T4615] [ 69.522904][ T4615] ====================================================== [ 69.525141][ T4615] WARNING: possible circular locking dependency detected [ 69.527153][ T4615] 5.15.186-syzkaller #0 Not tainted [ 69.528662][ T4615] ------------------------------------------------------ [ 69.530625][ T4615] syz.0.172/4615 is trying to acquire lock: [ 69.532265][ T4615] ffff0000f1b31450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 69.535563][ T4615] [ 69.535563][ T4615] but task is already holding lock: [ 69.537670][ T4615] ffff0000f1b30120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 69.540257][ T4615] [ 69.540257][ T4615] which lock already depends on the new lock. [ 69.540257][ T4615] [ 69.543132][ T4615] [ 69.543132][ T4615] the existing dependency chain (in reverse order) is: [ 69.545701][ T4615] [ 69.545701][ T4615] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 69.547870][ T4615] lock_sock_nested+0xd8/0x1d4 [ 69.549458][ T4615] smc_listen_out+0x11c/0x3e8 [ 69.550935][ T4615] smc_listen_work+0x1d0/0xd2c [ 69.552442][ T4615] process_one_work+0x79c/0x1140 [ 69.553930][ T4615] worker_thread+0x8f4/0x101c [ 69.555328][ T4615] kthread+0x374/0x454 [ 69.556640][ T4615] ret_from_fork+0x10/0x20 [ 69.558058][ T4615] [ 69.558058][ T4615] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 69.560975][ T4615] __lock_acquire+0x2928/0x651c [ 69.562483][ T4615] lock_acquire+0x1f4/0x620 [ 69.563899][ T4615] __flush_work+0xf4/0x1bc [ 69.565290][ T4615] __cancel_work_timer+0x2ec/0x448 [ 69.566840][ T4615] cancel_work_sync+0x24/0x38 [ 69.568293][ T4615] smc_clcsock_release+0x64/0xe8 [ 69.569876][ T4615] __smc_release+0x3bc/0x530 [ 69.571326][ T4615] smc_close_non_accepted+0xdc/0x298 [ 69.572936][ T4615] smc_close_active+0x890/0xc20 [ 69.574440][ T4615] __smc_release+0x2dc/0x530 [ 69.575866][ T4615] smc_release+0x264/0x568 [ 69.577276][ T4615] sock_close+0xb4/0x1f8 [ 69.578528][ T4615] __fput+0x1c0/0x7f8 [ 69.579831][ T4615] ____fput+0x20/0x30 [ 69.581147][ T4615] task_work_run+0x12c/0x1e0 [ 69.582659][ T4615] do_notify_resume+0x24b4/0x3128 [ 69.584289][ T4615] el0_svc+0xf0/0x1e0 [ 69.585576][ T4615] el0t_64_sync_handler+0xcc/0xe4 [ 69.587126][ T4615] el0t_64_sync+0x1a0/0x1a4 [ 69.588556][ T4615] [ 69.588556][ T4615] other info that might help us debug this: [ 69.588556][ T4615] [ 69.591379][ T4615] Possible unsafe locking scenario: [ 69.591379][ T4615] [ 69.593368][ T4615] CPU0 CPU1 [ 69.594874][ T4615] ---- ---- [ 69.596349][ T4615] lock(sk_lock-AF_SMC/1); [ 69.597640][ T4615] lock((work_completion)(&new_smc->smc_listen_work)); [ 69.599830][ T4615] lock(sk_lock-AF_SMC/1); [ 69.601733][ T4615] lock((work_completion)(&new_smc->smc_listen_work)); [ 69.603664][ T4615] [ 69.603664][ T4615] *** DEADLOCK *** [ 69.603664][ T4615] [ 69.606021][ T4615] 2 locks held by syz.0.172/4615: [ 69.607482][ T4615] #0: ffff0000e9c0d610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 69.610372][ T4615] #1: ffff0000f1b30120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1f4/0x568 [ 69.613169][ T4615] [ 69.613169][ T4615] stack backtrace: [ 69.614904][ T4615] CPU: 1 PID: 4615 Comm: syz.0.172 Not tainted 5.15.186-syzkaller #0 [ 69.617163][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.619998][ T4615] Call trace: [ 69.620915][ T4615] dump_backtrace+0x0/0x43c [ 69.622180][ T4615] show_stack+0x2c/0x3c [ 69.623347][ T4615] __dump_stack+0x30/0x40 [ 69.624584][ T4615] dump_stack_lvl+0xf8/0x160 [ 69.625830][ T4615] dump_stack+0x1c/0x5c [ 69.627014][ T4615] print_circular_bug+0x148/0x1b0 [ 69.628479][ T4615] check_noncircular+0x240/0x2d4 [ 69.629913][ T4615] __lock_acquire+0x2928/0x651c [ 69.631274][ T4615] lock_acquire+0x1f4/0x620 [ 69.632534][ T4615] __flush_work+0xf4/0x1bc [ 69.633842][ T4615] __cancel_work_timer+0x2ec/0x448 [ 69.635277][ T4615] cancel_work_sync+0x24/0x38 [ 69.636635][ T4615] smc_clcsock_release+0x64/0xe8 [ 69.638001][ T4615] __smc_release+0x3bc/0x530 [ 69.639366][ T4615] smc_close_non_accepted+0xdc/0x298 [ 69.640964][ T4615] smc_close_active+0x890/0xc20 [ 69.642358][ T4615] __smc_release+0x2dc/0x530 [ 69.642725][ T4621] udc-core: couldn't find an available UDC or it's busy [ 69.643752][ T4615] smc_release+0x264/0x568 [ 69.643766][ T4615] sock_close+0xb4/0x1f8 [ 69.643776][ T4615] __fput+0x1c0/0x7f8 [ 69.649250][ T4615] ____fput+0x20/0x30 [ 69.650393][ T4615] task_work_run+0x12c/0x1e0 [ 69.651192][ T4621] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.651749][ T4615] do_notify_resume+0x24b4/0x3128 [ 69.655313][ T4615] el0_svc+0xf0/0x1e0 [ 69.656436][ T4615] el0t_64_sync_handler+0xcc/0xe4 [ 69.657520][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.657919][ T4615] el0t_64_sync+0x1a0/0x1a4 [ 69.659628][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.782220][ T7] cfg80211: failed to load regulatory.db