last executing test programs: 1m8.104377855s ago: executing program 1 (id=44): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9d}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x5e13, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20, 0x74}}], 0x1, 0x0) 1m8.028311852s ago: executing program 1 (id=45): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f0000000b574e69b3000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f00000000c0)=0x3) 1m4.923929886s ago: executing program 1 (id=54): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="d401000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000fffc0000000000c03b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010000000033000000e000000100000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000020000000000000000000000000ffffffff020000fd100000000500000005000000ca000800c6000800"], 0x1d4}}, 0x0) 1m4.825830734s ago: executing program 1 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x9}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.737059466s ago: executing program 1 (id=63): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1m1.537576634s ago: executing program 1 (id=70): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 7.023941313s ago: executing program 0 (id=398): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x6, 0x2d2, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}]}, 0x1c) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.019131173s ago: executing program 0 (id=399): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0x801c581f, 0x30000002000005c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 6.128226769s ago: executing program 0 (id=401): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000300), 0x4) 5.895914068s ago: executing program 4 (id=402): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) umount2(0x0, 0xd) 5.213281686s ago: executing program 2 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6004f1ff00702b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33"], 0x0) 5.197250988s ago: executing program 0 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x248, 0x20a, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 5.083782688s ago: executing program 2 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) 4.877617905s ago: executing program 4 (id=406): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000280)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 4.809586281s ago: executing program 4 (id=407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 4.386682337s ago: executing program 3 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xd, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) renameat2(r4, &(0x7f0000000080)='./file1\x00', r3, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 4.195829963s ago: executing program 2 (id=409): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x2, 0x300) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 3.911562527s ago: executing program 4 (id=410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 3.2918242s ago: executing program 3 (id=411): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000001000000000000000000002000"/36], 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@random={'trusted.', 'xfrm0\x00'}, &(0x7f0000000640)=""/254, 0xfe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) clock_getres(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r5, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000180)=r0) 3.17594093s ago: executing program 4 (id=412): r0 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) 3.17539178s ago: executing program 0 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 2.979859097s ago: executing program 4 (id=414): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1028801, &(0x7f0000000400), 0x1, 0x47b, &(0x7f0000001080)="$eJzs3M9vFFUcAPDvTLeAoLQioiBIFU0af7S0oHIwMRpNPGhioge8WdtCkEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIBeXDM7M2W77K6tbNkN+/kkC+/tvH3vfTvzpm/f220AfWsk+yeJuDMiLkbEUJ5dXWAk/+/alaXpv64sTSdRrb7+e1Ird/XK0nS1UL5uW1HnaBqRfpIUjcRgfjQvtXD23MmpubnZM8VrxhdPvTu+cPbckydOTR2fPT57evLIkcOHJp55evKpJr3+9cJ648ziu7rng/m9u19+88Kr00cvvP3D11lPdu3Lj2dxrLfOFqrVIjGSBf5H/rNpLPRohxrrFf9Ur8eZVLrdG9ZqICIqxeC8GEMxENdP3lC89HFXOwdsqOyevbn14eUqcBtLYuNKA72s/EWfvf8tH7do6tETLj+fvwHK4r5WPPIjlUiLMoMb2P5IRBxd/vuL7BEN6xDVJusGAAA369ts/vNEs/lfGrvqym0v9oaGI+LuiNgREfdExM6IuDeiVva+iLh/ne2PNORvnH+ml/5XYGuUzf+eLfa2Vs//ytlfDA8Uubtq8Q8mx07MzR4sfiajMbg5y080q7ys4sWfP2vVfv38L3tk7ZdzwaKSS5V8gW5L+czM1OJUpyallz+K2FNpFn+yshOQRMTuiNizvqq3l4kTj321t1Wh/46/jQ7sM1W/LCtZWo6G+EtJ+/3J8S0xN3twvLwqbvTjT+dfa9X+TcXfAdn537r6+m8oMfRnUr9fu7By4Ln6Um3WkOP8L5+2fE9ZWfv1vyK7/jclb9T2dDcVz70/tbh4ZiJiU/JKLb/q+cnrry3zZfks/tEDzcf/juI1WfwPRER2Ee+LiAcjYn9x7h6KiIcj4kCb+L9/4ZF3Wh3rhfM/0/T+t3L9D68+/+tPDJz87ptW7a/t/ne4lhotnqnd/9p4KyJad6e8jTZczQAAAHAbS2ufjU/SsZV0mo6N5Z/h3xlb07n5hcXHj82/d3om/wz9cAym5UrXUN166ESyXNSY5yeLteLy+KFi3fjzgTtq+bHp+bmZLscO/W5bi/Gf+W2g270DNpzva0H/ahz/aZf6Adx6fv9D/zL+oX8Z/9C/mo3/Dxvy9gLgdlQd6nYPgO4x/4f+ZfxD/6rU/dFqoG/czPf6NypRafPtfYleSUTaE93omcT+JqMp7dL4qnRgdHf5xgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAh/wYAAP//uP/6tA==") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404a, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff8b00"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40f41, 0x7a8f08989cc21170) openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) 2.208166692s ago: executing program 3 (id=415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 1.898486949s ago: executing program 0 (id=416): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xff, 0xc, 0x3d, 0x20, 0x71b, 0x32bb, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x8, 0x3, [{{0x9, 0x4, 0xcc, 0x14, 0x0, 0xa4, 0xf5, 0x1d, 0x1}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 1.843815853s ago: executing program 3 (id=417): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.810562206s ago: executing program 3 (id=418): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(0x0, 0x880) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f939b43c0000000000"], 0x48) close(r6) r7 = dup(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) 1.779204759s ago: executing program 2 (id=419): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x10000, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.730054103s ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f00000007c0)=""/160, 0xa0) 627.636857ms ago: executing program 3 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 0s ago: executing program 2 (id=422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0xd8c1, 0x0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000640)=0xd000, 0xd000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. [ 51.801449][ T3556] cgroup: Unknown subsys name 'net' [ 51.936954][ T3556] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.321027][ T3556] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.596615][ T3580] chnl_net:caif_netlink_parms(): no params data found [ 54.756259][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 54.773342][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.781412][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.789874][ T3580] device bridge_slave_0 entered promiscuous mode [ 54.799208][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.806298][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.814487][ T3580] device bridge_slave_1 entered promiscuous mode [ 54.841733][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 54.896032][ T3580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.924533][ T3580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.933821][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 55.009530][ T3580] team0: Port device team_slave_0 added [ 55.015714][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.023086][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.031250][ T3567] device bridge_slave_0 entered promiscuous mode [ 55.038501][ T3570] chnl_net:caif_netlink_parms(): no params data found [ 55.047913][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.055128][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.063321][ T3568] device bridge_slave_0 entered promiscuous mode [ 55.078649][ T3580] team0: Port device team_slave_1 added [ 55.084730][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.092363][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.100104][ T3567] device bridge_slave_1 entered promiscuous mode [ 55.118997][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.126611][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.134537][ T3568] device bridge_slave_1 entered promiscuous mode [ 55.169074][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.206185][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.227634][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.234757][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.260750][ T3580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.284590][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.302218][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.309158][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.335327][ T3580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.359342][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.368688][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.375853][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.384042][ T3569] device bridge_slave_0 entered promiscuous mode [ 55.405643][ T3567] team0: Port device team_slave_0 added [ 55.418233][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.425617][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.433422][ T3569] device bridge_slave_1 entered promiscuous mode [ 55.456952][ T3567] team0: Port device team_slave_1 added [ 55.486877][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.504539][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.511788][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.519515][ T3570] device bridge_slave_0 entered promiscuous mode [ 55.537569][ T3568] team0: Port device team_slave_0 added [ 55.545353][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.568756][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.575915][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.584063][ T3570] device bridge_slave_1 entered promiscuous mode [ 55.591561][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.598499][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.625711][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.638381][ T3568] team0: Port device team_slave_1 added [ 55.654533][ T3580] device hsr_slave_0 entered promiscuous mode [ 55.661586][ T3580] device hsr_slave_1 entered promiscuous mode [ 55.683348][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.690296][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.723758][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.744886][ T3569] team0: Port device team_slave_0 added [ 55.752594][ T3569] team0: Port device team_slave_1 added [ 55.795594][ T3570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.815164][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.822408][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.848439][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.863090][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.870029][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.896392][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.916451][ T3570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.952789][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.959773][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.985852][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.007447][ T3567] device hsr_slave_0 entered promiscuous mode [ 56.014173][ T3567] device hsr_slave_1 entered promiscuous mode [ 56.021164][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.028955][ T3567] Cannot create hsr debugfs directory [ 56.047409][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.054514][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.080454][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.112610][ T3568] device hsr_slave_0 entered promiscuous mode [ 56.119542][ T3568] device hsr_slave_1 entered promiscuous mode [ 56.126483][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.134244][ T3568] Cannot create hsr debugfs directory [ 56.144911][ T3570] team0: Port device team_slave_0 added [ 56.182947][ T3570] team0: Port device team_slave_1 added [ 56.249481][ T3569] device hsr_slave_0 entered promiscuous mode [ 56.257357][ T3569] device hsr_slave_1 entered promiscuous mode [ 56.263944][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.271786][ T3569] Cannot create hsr debugfs directory [ 56.286479][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.293532][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.319450][ T3570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.361836][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.368801][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.394862][ T3570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.421326][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 56.427799][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 56.430812][ T1302] Bluetooth: hci3: command 0x0409 tx timeout [ 56.440469][ T1302] Bluetooth: hci4: command 0x0409 tx timeout [ 56.447053][ T1302] Bluetooth: hci0: command 0x0409 tx timeout [ 56.527697][ T3570] device hsr_slave_0 entered promiscuous mode [ 56.536402][ T3570] device hsr_slave_1 entered promiscuous mode [ 56.543036][ T3570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.550697][ T3570] Cannot create hsr debugfs directory [ 56.654931][ T3580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.673356][ T3580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.689082][ T3580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.698054][ T3580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.758969][ T3567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.770214][ T3567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.779636][ T3567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.796829][ T3567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.847367][ T3568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.868526][ T3568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.878581][ T3568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.902170][ T3568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.947122][ T3580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.959886][ T3570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.973895][ T3570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.982845][ T3570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.004451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.013614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.030113][ T3570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.046100][ T3580] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.071714][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.081817][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.090778][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.098026][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.108854][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.137702][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.147770][ T3569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.156765][ T3569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.181371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.190160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.198822][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.205899][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.214813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.223615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.231503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.239161][ T3569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.253019][ T3569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.273671][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.293508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.316660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.327168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.335799][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.342870][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.351910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.361665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.370042][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.377115][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.385442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.413196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.424109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.433549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.443041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.452042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.460728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.469272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.479442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.488184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.502328][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.511211][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.552511][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.561300][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.570393][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.585285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.595003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.608766][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.625929][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.643053][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.657710][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.675483][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.690347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.708020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.717390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.726643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.737671][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.761438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.772559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.782874][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.789947][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.799160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.808709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.817674][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.824756][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.845235][ T3570] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.882803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.892202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.901371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.908949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.916957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.928276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.937154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.946875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.955893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.964885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.973408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.982611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.991013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.999752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.028619][ T3580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.035874][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.046658][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.059037][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.066147][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.075630][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.088085][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.096935][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.104047][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.112660][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.120106][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.127692][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.144165][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.156859][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.174907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.185066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.193944][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.205407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.221223][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.238293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.246996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.257676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.269449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.306119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.314738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.324622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.334663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.344331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.353352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.362873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.371612][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.379161][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.389525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.397790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.406194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.414307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.422428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.431822][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.446137][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.455715][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.464060][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.472822][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.495338][ T3580] device veth0_vlan entered promiscuous mode [ 58.502024][ T3615] Bluetooth: hci0: command 0x041b tx timeout [ 58.508100][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 58.515213][ T3615] Bluetooth: hci2: command 0x041b tx timeout [ 58.515360][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.521622][ T3615] Bluetooth: hci3: command 0x041b tx timeout [ 58.521705][ T3615] Bluetooth: hci1: command 0x041b tx timeout [ 58.542801][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.552661][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.561512][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.568559][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.576400][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.594637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.609839][ T3580] device veth1_vlan entered promiscuous mode [ 58.636370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.650366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.666778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.677597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.693937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.703899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.712896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.723725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.732503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.742377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.754472][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.778220][ T3569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.800890][ T3569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.831236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.839424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.849807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.858878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.867564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.876786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.887116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.896176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.906040][ T3580] device veth0_macvtap entered promiscuous mode [ 58.923428][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.949809][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.967283][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.979640][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.997459][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.015080][ T3580] device veth1_macvtap entered promiscuous mode [ 59.032745][ T3567] device veth0_vlan entered promiscuous mode [ 59.048863][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.067074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.076739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.097331][ T3567] device veth1_vlan entered promiscuous mode [ 59.115428][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.127721][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.139852][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.151473][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.173702][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.183317][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.193082][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.202400][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.209794][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.223553][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.234223][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.252663][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.261601][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.280595][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.289513][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.299462][ T3580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.312654][ T3580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.321818][ T3580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.330663][ T3580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.359442][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.368939][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.377755][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.388013][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.409206][ T3570] device veth0_vlan entered promiscuous mode [ 59.420971][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.429484][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.446116][ T3568] device veth0_vlan entered promiscuous mode [ 59.455341][ T3567] device veth0_macvtap entered promiscuous mode [ 59.467234][ T3570] device veth1_vlan entered promiscuous mode [ 59.476254][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.484870][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.493942][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.502553][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.510980][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.519561][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.533995][ T3568] device veth1_vlan entered promiscuous mode [ 59.556155][ T3567] device veth1_macvtap entered promiscuous mode [ 59.587247][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.595532][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.605054][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.613034][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.623154][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.665628][ T3569] device veth0_vlan entered promiscuous mode [ 59.674683][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.683288][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.692844][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.709315][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.718295][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.727072][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.739867][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.751464][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.767140][ T3569] device veth1_vlan entered promiscuous mode [ 59.795113][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.804937][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.813678][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.825361][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.833853][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.845269][ T3570] device veth0_macvtap entered promiscuous mode [ 59.853987][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.871211][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.884483][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.897167][ T3567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.906885][ T3567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.915884][ T3567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.924980][ T3567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.942072][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.950183][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.959135][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.971750][ T3570] device veth1_macvtap entered promiscuous mode [ 59.986153][ T3568] device veth0_macvtap entered promiscuous mode [ 59.998019][ T3568] device veth1_macvtap entered promiscuous mode [ 60.009866][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.019138][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.032354][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.042362][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.051359][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.059419][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.067675][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.089336][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.100113][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.110309][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.126179][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.137398][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.149827][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.162159][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.172466][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.183773][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.194898][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.214499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.224560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.233779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.242568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.258284][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.269482][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.279803][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.290553][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.300358][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.311807][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.322920][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.342513][ T3570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.353152][ T3570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.362231][ T3570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.371033][ T3570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.392571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.403095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.415446][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.426702][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.437029][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.447688][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.457680][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.468274][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.479738][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.496307][ T3568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.505807][ T3568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.515702][ T3568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.524650][ T3568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.544449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.557062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.565847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.575396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.588561][ T3569] device veth0_macvtap entered promiscuous mode [ 60.592144][ T3644] Bluetooth: hci1: command 0x040f tx timeout [ 60.599820][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.606177][ T3644] Bluetooth: hci3: command 0x040f tx timeout [ 60.615126][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.615387][ T3644] Bluetooth: hci2: command 0x040f tx timeout [ 60.628497][ T3644] Bluetooth: hci4: command 0x040f tx timeout [ 60.634981][ T3644] Bluetooth: hci0: command 0x040f tx timeout [ 60.656923][ T3569] device veth1_macvtap entered promiscuous mode [ 60.665396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.678351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.686829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.754222][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.767549][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.773540][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.787276][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.789093][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.798032][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.815226][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.826908][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.837057][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.847963][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.859445][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.896495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.915594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.936822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.956502][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.969244][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.985532][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.019873][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.031133][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.043312][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.053597][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.066038][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.078066][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.115035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.133178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.172435][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.180451][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.199527][ T3569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.211361][ T3569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.220181][ T3569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.230804][ T3569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.273718][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.280843][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.288792][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.305116][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.330225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.342116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.459213][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.460014][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.485977][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.508908][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.517254][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.541707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.549887][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.583811][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.619975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.641040][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.675399][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.704055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.884337][ T3667] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.033179][ T26] audit: type=1326 audit(1728721352.931:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff713d7cff9 code=0x7ffc0000 [ 62.199255][ T26] audit: type=1326 audit(1728721352.981:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff713d7cff9 code=0x7ffc0000 [ 62.410213][ T26] audit: type=1326 audit(1728721352.981:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff713d7cff9 code=0x7ffc0000 [ 62.516704][ T3685] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 62.634205][ T26] audit: type=1326 audit(1728721353.021:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3666 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff713d7cff9 code=0x7ffc0000 [ 62.663290][ T3645] Bluetooth: hci0: command 0x0419 tx timeout [ 62.669701][ T3645] Bluetooth: hci4: command 0x0419 tx timeout [ 62.691835][ T3687] Zero length message leads to an empty skb [ 62.746042][ T3645] Bluetooth: hci2: command 0x0419 tx timeout [ 62.791438][ T3645] Bluetooth: hci3: command 0x0419 tx timeout [ 62.931990][ T3645] Bluetooth: hci1: command 0x0419 tx timeout [ 63.151965][ T3692] netlink: 200 bytes leftover after parsing attributes in process `syz.1.13'. [ 63.410641][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.660816][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 63.781381][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.801487][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 63.825526][ T3718] ======================================================= [ 63.825526][ T3718] WARNING: The mand mount option has been deprecated and [ 63.825526][ T3718] and is ignored by this kernel. Remove the mand [ 63.825526][ T3718] option from the mount to silence this warning. [ 63.825526][ T3718] ======================================================= [ 63.862232][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.030730][ T23] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 64.049902][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.094809][ T23] usb 3-1: Product: syz [ 64.100653][ T23] usb 3-1: Manufacturer: syz [ 64.105300][ T23] usb 3-1: SerialNumber: syz [ 64.133806][ T23] usb 3-1: config 0 descriptor?? [ 64.184326][ T23] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 64.196446][ T23] radioshark2: probe of 3-1:0.0 failed with error -22 [ 64.210729][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 64.230640][ T3610] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.490641][ T3610] usb 2-1: Using ep0 maxpacket: 16 [ 64.610763][ T3610] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 64.625390][ T3610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.644293][ T3610] usb 2-1: config 0 descriptor?? [ 64.682768][ T3610] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 65.130638][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.284615][ T1291] usb 3-1: USB disconnect, device number 2 [ 65.290980][ T3736] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24'. [ 65.335281][ T3736] device netdevsim0 entered promiscuous mode [ 65.344711][ T1202] block nbd1: Attempted send on invalid socket [ 65.351721][ T1202] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 65.378045][ T3736] device netdevsim0 left promiscuous mode [ 65.480989][ T7] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 65.507684][ T3737] netlink: 136 bytes leftover after parsing attributes in process `syz.4.24'. [ 65.600796][ T3610] gspca_sonixj: reg_r err -71 [ 65.605522][ T3610] sonixj: probe of 2-1:0.0 failed with error -71 [ 65.642858][ T3610] usb 2-1: USB disconnect, device number 2 [ 66.180888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.261654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.312820][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 66.343613][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.385692][ T7] usb 1-1: config 0 descriptor?? [ 66.434982][ T3746] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.483241][ T7] gspca_main: 0c45:8001 too many config [ 66.661937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.670881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.731568][ T7] usb 1-1: USB disconnect, device number 2 [ 67.066987][ T3669] syz.3.4 (3669): drop_caches: 1 [ 67.600668][ T3614] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 68.073540][ T3614] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.107196][ T3614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.148428][ T3614] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 68.205118][ T3614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.265230][ T3614] usb 1-1: config 0 descriptor?? [ 68.323141][ T3614] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 68.340452][ T3614] dvb-usb: bulk message failed: -22 (3/0) [ 68.481157][ T3614] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 68.571501][ T3614] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 68.578693][ T3614] usb 1-1: media controller created [ 68.602175][ T3614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.634464][ T3614] dvb-usb: bulk message failed: -22 (6/0) [ 68.654666][ T3614] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 68.713461][ T3614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 68.783755][ T3614] dvb-usb: schedule remote query interval to 150 msecs. [ 68.821393][ T3614] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 68.898434][ T3614] usb 1-1: USB disconnect, device number 3 [ 69.029903][ T3614] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 69.100727][ T3644] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.491322][ T3644] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 69.522691][ T3644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.561267][ T3644] usb 4-1: config 0 descriptor?? [ 69.814540][ T3787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.090743][ T3644] ath6kl: Unsupported hardware version: 0x0 [ 70.610746][ T3614] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.981388][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.024371][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.056368][ T3614] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.075472][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.075497][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.093408][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.109667][ T3614] usb 2-1: config 0 descriptor?? [ 71.173174][ T3614] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 72.090657][ T1291] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.380626][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.520817][ T1291] usb 1-1: config 108 has an invalid interface number: 85 but max is 0 [ 72.544668][ T1291] usb 1-1: config 108 has no interface number 0 [ 72.573859][ T1291] usb 1-1: config 108 interface 85 has no altsetting 0 [ 72.801563][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 72.817148][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.838717][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.856279][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.870844][ T1291] usb 1-1: string descriptor 0 read error: -22 [ 72.882114][ T1291] usb 1-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 72.920086][ T7] usb 5-1: config 0 descriptor?? [ 72.930441][ T1291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.995882][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 73.013384][ T1291] option 1-1:108.85: GSM modem (1-port) converter detected [ 73.283845][ T3610] usb 1-1: USB disconnect, device number 4 [ 73.302754][ T3610] option 1-1:108.85: device disconnected [ 73.356886][ T1291] usb 2-1: USB disconnect, device number 3 [ 73.447771][ T3837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 74.133033][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 74.273657][ T3850] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 74.306393][ T1291] usb 5-1: USB disconnect, device number 2 [ 74.880045][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 75.694352][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.706344][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.718594][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.730594][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.735587][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.747181][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.765237][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.774286][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.783755][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.804724][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.843752][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.862890][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.880592][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.915505][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.939357][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.953058][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.965922][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.977479][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.987823][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 75.999646][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.013896][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.025639][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.038860][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.047245][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.055503][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.063751][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.071886][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.087192][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: unknown main item tag 0x0 [ 76.100773][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.128994][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.143942][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 76.153304][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.171277][ T23] usb 1-1: config 0 descriptor?? [ 76.184807][ T1073] cfg80211: failed to load regulatory.db [ 76.201779][ T1302] hid-generic 0000:FFFFFFFE:0000.0001: hidraw0: HID vffffff.fb Device [syz0] on syz0 [ 76.228101][ T3644] ath6kl: Failed to init ath6kl core: -22 [ 76.482114][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 76.523592][ T3644] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 76.551327][ T3644] usb 4-1: USB disconnect, device number 2 [ 76.620713][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 76.627460][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 76.657985][ T23] usb 1-1: USB disconnect, device number 5 [ 76.800975][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 76.980653][ T3644] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 77.430849][ T3644] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.452888][ T3644] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.462816][ T3897] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 77.490176][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 77.544197][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.595667][ T3644] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 77.623931][ T3897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.699389][ T3897] team0: Port device bond0 added [ 77.708528][ T3897] syz.2.72 (3897) used greatest stack depth: 18840 bytes left [ 77.840792][ T3644] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 77.849897][ T3644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.920722][ T3644] usb 4-1: Product: syz [ 77.924917][ T3644] usb 4-1: Manufacturer: syz [ 77.929554][ T3644] usb 4-1: SerialNumber: syz [ 78.002880][ T3644] usb 4-1: config 0 descriptor?? [ 78.040696][ T3644] usb 4-1: can't set config #0, error -71 [ 78.080894][ T3644] usb 4-1: USB disconnect, device number 3 [ 78.747135][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 78.753965][ T3921] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.754052][ T3921] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.754074][ T3921] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.754095][ T3921] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.754554][ T3921] device vxlan0 entered promiscuous mode [ 79.213808][ T3925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.78'. [ 79.305954][ T3927] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.687924][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 79.780810][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.400637][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.781353][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.806031][ T23] usb 3-1: config 0 has no interfaces? [ 80.847028][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.892205][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.950006][ T23] usb 3-1: config 0 descriptor?? [ 81.045537][ T3953] netlink: 80 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.080659][ T3614] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.161901][ T3953] netlink: 80 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.250779][ T23] usb 3-1: string descriptor 0 read error: -71 [ 81.273836][ T23] usb 3-1: USB disconnect, device number 3 [ 81.365688][ T3953] netlink: 80 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.450647][ T3614] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 81.480412][ T3614] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 81.506045][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.684977][ T3614] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 81.968435][ T3964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.88'. [ 82.864418][ T1073] usb 4-1: USB disconnect, device number 4 [ 83.008495][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.016613][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.131728][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.139002][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.147016][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.154118][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.343068][ T3972] team0: Port device bridge0 added [ 83.345761][ T3979] device bridge_slave_1 left promiscuous mode [ 83.345948][ T3979] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.372738][ T3979] device bridge_slave_0 left promiscuous mode [ 83.372892][ T3979] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.748891][ T3979] team0: Port device bridge0 removed [ 83.886632][ T3987] sctp: [Deprecated]: syz.0.94 (pid 3987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.886632][ T3987] Use struct sctp_sack_info instead [ 84.108535][ T3993] usb usb8: usbfs: process 3993 (syz.0.97) did not claim interface 0 before use [ 86.150662][ T3644] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.410568][ T3644] usb 3-1: Using ep0 maxpacket: 16 [ 86.551706][ T3644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.596697][ T3644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.617189][ T3644] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 86.656518][ T3644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.711265][ T3644] usb 3-1: config 0 descriptor?? [ 87.174229][ T3999] udc-core: couldn't find an available UDC or it's busy [ 87.192021][ T3999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.400669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 87.656565][ T1186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.778081][ T1186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.850657][ T3644] usbhid 3-1:0.0: can't add hid device: -71 [ 87.856620][ T3644] usbhid: probe of 3-1:0.0 failed with error -71 [ 87.885435][ T3644] usb 3-1: USB disconnect, device number 4 [ 87.935725][ T1186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.025829][ T4009] chnl_net:caif_netlink_parms(): no params data found [ 88.139223][ T1186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.464438][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.481756][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.499957][ T4009] device bridge_slave_0 entered promiscuous mode [ 88.527010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 88.574226][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.597376][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.630370][ T4009] device bridge_slave_1 entered promiscuous mode [ 88.728975][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 88.802285][ T4009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.872200][ T4009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.046552][ T4009] team0: Port device team_slave_0 added [ 89.138332][ T4009] team0: Port device team_slave_1 added [ 89.227032][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.227049][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.227073][ T4009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.228800][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.228814][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.228838][ T4009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.311079][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 89.372826][ T4009] device hsr_slave_0 entered promiscuous mode [ 89.384935][ T4009] device hsr_slave_1 entered promiscuous mode [ 89.390951][ T4009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.411755][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.624413][ T4009] Cannot create hsr debugfs directory [ 90.270192][ T4063] kvm: emulating exchange as write [ 90.657213][ T1186] device hsr_slave_0 left promiscuous mode [ 90.715781][ T1186] device hsr_slave_1 left promiscuous mode [ 90.733903][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.764279][ T1186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.811838][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.845505][ T1186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.879763][ T1186] device bridge_slave_1 left promiscuous mode [ 90.898453][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.962239][ T1186] device bridge_slave_0 left promiscuous mode [ 90.981114][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.094966][ T1186] device veth1_macvtap left promiscuous mode [ 91.112806][ T1186] device veth0_macvtap left promiscuous mode [ 91.132878][ T1186] device veth1_vlan left promiscuous mode [ 91.139696][ T1186] device veth0_vlan left promiscuous mode [ 91.300853][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.380754][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 91.428039][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 91.542717][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 91.691622][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.709937][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.737314][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.770602][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.812790][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.830918][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.851427][ T1186] team0 (unregistering): Port device team_slave_1 removed [ 91.876310][ T1186] team0 (unregistering): Port device team_slave_0 removed [ 91.907702][ T1186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.926116][ T1186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.997443][ T1186] bond0 (unregistering): Released all slaves [ 92.100839][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 92.107038][ T7] usbtmc 4-1:16.0: can't read capabilities [ 92.330806][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.345977][ T1073] usb 4-1: USB disconnect, device number 5 [ 92.481365][ T4009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.495347][ T4009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.514363][ T4009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.527170][ T4009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.700755][ T1302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.793152][ T4009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.834353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.881415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.921075][ T4151] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.922782][ T4009] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.970830][ T1302] usb 1-1: Using ep0 maxpacket: 8 [ 93.033301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.088789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.100683][ T1302] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 93.123255][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.130345][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.135317][ T1302] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 93.160759][ T1302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.191406][ T1302] usb 1-1: config 0 descriptor?? [ 93.228257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.246098][ T1302] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 93.319623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.348117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.408741][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.415847][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.461246][ T3614] Bluetooth: hci5: command 0x040f tx timeout [ 93.462113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.484383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.519611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.563907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.594818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.635079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.680391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.755465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.848274][ T4009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.966612][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.035325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.055583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.114249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.536549][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.549939][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.648913][ T4009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.798606][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.817134][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.887870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.896704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.908716][ T4009] device veth0_vlan entered promiscuous mode [ 94.915889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.924448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.946154][ T4009] device veth1_vlan entered promiscuous mode [ 95.002858][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.024288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.034849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.061678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.095793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.138564][ T4009] device veth0_macvtap entered promiscuous mode [ 95.181798][ T4009] device veth1_macvtap entered promiscuous mode [ 95.291368][ T21] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 95.303550][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 95.370860][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.386257][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.490766][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.503755][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.541117][ T3610] Bluetooth: hci5: command 0x0419 tx timeout [ 95.590672][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.600174][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.652326][ T1291] usb 1-1: USB disconnect, device number 6 [ 95.680666][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.693572][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.788002][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.797404][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.882615][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.892909][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.971041][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.010681][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.100907][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.110861][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.118886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.143504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.203285][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.254757][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.272785][ T21] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 96.292996][ T21] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 96.311458][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.332998][ T21] usb 5-1: Product: syz [ 96.344852][ T21] usb 5-1: Manufacturer: syz [ 96.352967][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.369389][ T21] usb 5-1: SerialNumber: syz [ 96.390291][ T21] usb 5-1: config 0 descriptor?? [ 96.396641][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.432971][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.455615][ T21] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 96.475675][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.534077][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.583070][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.613749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.630327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.658769][ T21] usb 5-1: USB disconnect, device number 3 [ 96.679486][ T21] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 96.714903][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.736332][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.751201][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.779022][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.829811][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.850815][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.861262][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.872698][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.884664][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.893396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.911062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.937474][ T4009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981667][ T4009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.993285][ T4009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002274][ T4009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.175659][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.210561][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.238652][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.263608][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.272271][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.305923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.752192][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 98.908910][ T4268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.032801][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 99.520614][ T3611] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.599946][ T4292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 99.805126][ T3611] usb 5-1: Using ep0 maxpacket: 32 [ 99.828025][ T4302] tipc: Started in network mode [ 99.833192][ T4302] tipc: Node identity , cluster identity 4711 [ 99.839469][ T4302] tipc: Failed to set node id, please configure manually [ 99.851073][ T4302] tipc: Enabling of bearer rejected, failed to enable media [ 100.090787][ T3611] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 100.109109][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.118109][ T3611] usb 5-1: Product: syz [ 100.122707][ T3611] usb 5-1: Manufacturer: syz [ 100.127372][ T3611] usb 5-1: SerialNumber: syz [ 100.138870][ T3611] usb 5-1: config 0 descriptor?? [ 100.183024][ T3611] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 100.839423][ T4327] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 101.154404][ T4333] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 101.930661][ T3611] gspca_ov534_9: reg_r err -71 [ 101.994397][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 102.054213][ T4351] syz.3.197 uses obsolete (PF_INET,SOCK_PACKET) [ 102.220660][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.280706][ T3611] gspca_ov534_9: Unknown sensor 0000 [ 102.280773][ T3611] ov534_9: probe of 5-1:0.0 failed with error -22 [ 102.320774][ T3611] usb 5-1: USB disconnect, device number 4 [ 102.600943][ T7] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 102.629530][ T7] usb 3-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 102.649434][ T7] usb 3-1: config 0 has no interface number 0 [ 102.656490][ T7] usb 3-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 102.673521][ T7] usb 3-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.687886][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 102.700042][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.729536][ T7] usb 3-1: config 0 descriptor?? [ 102.940584][ T7] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 103.034719][ T4368] udc-core: couldn't find an available UDC or it's busy [ 103.090655][ T1291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.102457][ T4368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.340640][ T1291] usb 4-1: Using ep0 maxpacket: 8 [ 103.382317][ T4348] udc-core: couldn't find an available UDC or it's busy [ 103.450906][ T4348] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.470661][ T1291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.596779][ T1291] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.614756][ T4376] dccp_close: ABORT with 32 bytes unread [ 103.680759][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.703428][ T1291] usb 4-1: config 0 descriptor?? [ 103.953773][ T1291] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.883219][ T1291] usb 4-1: USB disconnect, device number 6 [ 104.897723][ T1291] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 105.171118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.362513][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 105.759689][ T7] usb 3-1: USB disconnect, device number 5 [ 105.938426][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.050444][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.493587][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 106.552135][ T4446] Cannot find del_set index 3 as target [ 106.817098][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 107.020178][ T4458] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.036166][ T4458] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.086653][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 108.453760][ T4493] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.048135][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 109.163607][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 109.398842][ T4517] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 109.439011][ T4519] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.517785][ T4517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.595724][ T4517] team0: Port device bond0 added [ 110.893114][ T4546] IPv4: Oversized IP packet from 127.202.26.0 [ 111.551698][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.710240][ T4560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 111.920653][ T23] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 111.949279][ T23] usb 3-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 111.960696][ T23] usb 3-1: config 0 has no interface number 0 [ 111.976987][ T23] usb 3-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 111.998580][ T23] usb 3-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.040575][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 112.144649][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.200988][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 112.265555][ T23] usb 3-1: config 0 descriptor?? [ 112.493992][ T23] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 112.753674][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 114.804658][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.900748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!! [ 114.910557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 115.142429][ T23] usb 3-1: USB disconnect, device number 6 [ 115.586229][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 116.010604][ T3611] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.390725][ T3611] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 116.398960][ T3611] usb 4-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 116.471872][ T3611] usb 4-1: config 0 has no interface number 0 [ 116.515036][ T3611] usb 4-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 116.557217][ T3611] usb 4-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.616831][ T3611] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 116.672168][ T3611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.727963][ T3611] usb 4-1: config 0 descriptor?? [ 116.739828][ T4648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.303'. [ 116.940747][ T3611] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 119.009577][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 119.326944][ T4682] bridge0: port 3(gretap0) entered blocking state [ 119.391048][ T4682] bridge0: port 3(gretap0) entered disabled state [ 119.418737][ T4682] device gretap0 entered promiscuous mode [ 119.435322][ T4682] bridge0: port 3(gretap0) entered blocking state [ 119.442196][ T4682] bridge0: port 3(gretap0) entered forwarding state [ 119.534923][ T4684] device gretap0 left promiscuous mode [ 119.551424][ T4684] bridge0: port 3(gretap0) entered disabled state [ 119.575320][ T3611] usb 4-1: USB disconnect, device number 7 [ 119.622085][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 121.035625][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 121.807893][ T4742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 122.048829][ T4744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.347855][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 123.565003][ T4787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 123.816040][ T4792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 123.878483][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 123.952304][ T4796] team1: Mode changed to "activebackup" [ 124.321092][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 125.399668][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 125.710748][ T3644] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.935126][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 125.960605][ T3644] usb 4-1: Using ep0 maxpacket: 16 [ 126.091060][ T3644] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 126.100130][ T3644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.151583][ T3644] usb 4-1: config 0 descriptor?? [ 126.217291][ T3644] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 126.840695][ T3644] gspca_sonixj: reg_w1 err -71 [ 126.845631][ T3644] sonixj: probe of 4-1:0.0 failed with error -71 [ 126.890777][ T3644] usb 4-1: USB disconnect, device number 8 [ 127.776555][ T4869] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 127.986141][ T4869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.998937][ T4869] team0: Port device bond0 added [ 128.990833][ T3611] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.502954][ T3611] usb 5-1: Using ep0 maxpacket: 16 [ 129.786605][ T3611] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 129.806714][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.837334][ T3611] usb 5-1: config 0 descriptor?? [ 129.893824][ T3611] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 130.570682][ T3611] gspca_sonixj: reg_w1 err -71 [ 130.575731][ T3611] sonixj: probe of 5-1:0.0 failed with error -71 [ 130.591995][ T3611] usb 5-1: USB disconnect, device number 5 [ 131.278190][ T4915] process 'syz.0.398' launched './file0' with NULL argv: empty string added [ 131.441427][ T4916] loop4: detected capacity change from 0 to 1024 [ 132.142055][ T4916] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 132.520886][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.552633][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183438][ T4931] tipc: Started in network mode [ 133.188344][ T4931] tipc: Node identity 101, cluster identity 4711 [ 133.210469][ T4931] tipc: Node number set to 257 [ 133.249275][ T4931] tipc: Cannot configure node identity twice [ 133.284254][ T26] audit: type=1326 audit(1728721424.181:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 133.310180][ T26] audit: type=1326 audit(1728721424.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 133.340604][ T26] audit: type=1326 audit(1728721424.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 133.372779][ T26] audit: type=1326 audit(1728721424.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 133.402987][ T26] audit: type=1326 audit(1728721424.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 133.487461][ T4940] netem: change failed [ 133.550578][ T3610] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.920714][ T3610] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.946155][ T3610] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 133.957862][ T3610] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 133.975950][ T3610] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.986445][ T3610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.005906][ T4945] loop3: detected capacity change from 0 to 512 [ 134.012781][ T4936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.150048][ T4945] EXT4-fs (loop3): 1 orphan inode deleted [ 134.164632][ T4945] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 134.218203][ T4945] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038 (0x7fffffff) [ 134.238570][ T3610] usb 1-1: USB disconnect, device number 7 [ 134.431546][ T26] audit: type=1326 audit(1728721425.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 135.034399][ T26] audit: type=1326 audit(1728721425.331:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 135.057965][ T26] audit: type=1326 audit(1728721425.761:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 135.129272][ T26] audit: type=1326 audit(1728721425.761:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 135.269871][ T26] audit: type=1326 audit(1728721425.761:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5da92afff9 code=0x7ffc0000 [ 135.280893][ T4965] loop3: detected capacity change from 0 to 512 [ 135.385724][ T4965] EXT4-fs (loop3): 1 truncate cleaned up [ 135.411776][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.414906][ T4969] loop4: detected capacity change from 0 to 512 [ 135.696547][ T4972] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.411: Directory hole found for htree leaf block 0 [ 136.283881][ T4969] loop4: detected capacity change from 0 to 2048 [ 136.444420][ T4969] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.414: casefold flag without casefold feature [ 136.462980][ T4969] EXT4-fs (loop4): get root inode failed [ 136.468648][ T4969] EXT4-fs (loop4): mount failed [ 136.723044][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.264095][ T4969] sched: RT throttling activated [ 243.300448][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.307473][ C1] rcu: 0-...!: (1 GPs behind) idle=c9f/1/0x4000000000000000 softirq=11992/11993 fqs=1 [ 243.318213][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3615/1:b..l [ 243.326139][ C1] (detected by 1, t=10502 jiffies, g=17013, q=122) [ 243.332732][ C1] Sending NMI from CPU 1 to CPUs 0: [ 243.337949][ C0] NMI backtrace for cpu 0 [ 243.337973][ C0] CPU: 0 PID: 4968 Comm: syz.4.414 Not tainted 5.15.167-syzkaller #0 [ 243.337990][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.338004][ C0] RIP: 0010:__lock_acquire+0xf28/0x1ff0 [ 243.338037][ C0] Code: cf 89 ca c1 c2 06 44 31 fa 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 89 f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 31 d5 <01> f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 48 c7 c0 48 94 e9 8d [ 243.338054][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000086 [ 243.338069][ C0] RAX: 00000000000018e1 RBX: 000000000506059a RCX: 000000000018fa7d [ 243.338080][ C0] RDX: 00000000faf9e11e RSI: 00000000ffe6ebd6 RDI: dffffc0000000000 [ 243.338091][ C0] RBP: 00000000d629c92e R08: dffffc0000000000 R09: fffffbfff20e241a [ 243.338102][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 243.338113][ C0] R13: ffff88807990a8a8 R14: 1ffff1100f321514 R15: 0000000000000062 [ 243.338124][ C0] FS: 000055558dec3500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 243.338138][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.338149][ C0] CR2: 0000000000000000 CR3: 000000002355d000 CR4: 00000000003506f0 [ 243.338162][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.338171][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.338180][ C0] Call Trace: [ 243.338186][ C0] [ 243.338192][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 243.338211][ C0] ? read_lock_is_recursive+0x10/0x10 [ 243.338228][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 243.338256][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 243.338272][ C0] ? nmi_handle+0xf7/0x370 [ 243.338290][ C0] ? __lock_acquire+0xf28/0x1ff0 [ 243.338304][ C0] ? default_do_nmi+0x62/0x150 [ 243.338323][ C0] ? exc_nmi+0xa8/0x100 [ 243.338338][ C0] ? end_repeat_nmi+0x16/0x31 [ 243.338357][ C0] ? __lock_acquire+0xf28/0x1ff0 [ 243.338372][ C0] ? __lock_acquire+0xf28/0x1ff0 [ 243.338387][ C0] ? __lock_acquire+0xf28/0x1ff0 [ 243.338402][ C0] [ 243.338406][ C0] [ 243.338417][ C0] lock_acquire+0x1db/0x4f0 [ 243.338431][ C0] ? __hrtimer_run_queues+0x662/0xcf0 [ 243.338450][ C0] ? read_lock_is_recursive+0x10/0x10 [ 243.338465][ C0] ? rcu_lock_release+0x5/0x20 [ 243.338481][ C0] ? __netif_schedule+0xc0/0x310 [ 243.338499][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 243.338516][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 243.338535][ C0] _raw_spin_lock_irq+0xcf/0x110 [ 243.338564][ C0] ? __hrtimer_run_queues+0x662/0xcf0 [ 243.338578][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 243.338598][ C0] __hrtimer_run_queues+0x662/0xcf0 [ 243.338619][ C0] ? hrtimer_interrupt+0x980/0x980 [ 243.338633][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 243.338653][ C0] hrtimer_interrupt+0x392/0x980 [ 243.338675][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 243.338695][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 243.338712][ C0] [ 243.338716][ C0] [ 243.338721][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 243.338739][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 243.338756][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 f2 3e 8c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 87 87 19 f7 65 8b 05 08 8a c4 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 243.338768][ C0] RSP: 0018:ffffc9000158f8a0 EFLAGS: 00000206 [ 243.338780][ C0] RAX: 88df300ee3a47d00 RBX: 1ffff920002b1f18 RCX: ffffffff96868f03 [ 243.338791][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: 0000000000000001 [ 243.338801][ C0] RBP: ffffc9000158f930 R08: ffffffff8186db50 R09: ffffed1017205441 [ 243.338812][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 243.338822][ C0] R13: 1ffff920002b1f14 R14: ffffc9000158f8c0 R15: 0000000000000246 [ 243.338835][ C0] ? trace_hardirqs_on+0x30/0x80 [ 243.338860][ C0] ? _raw_spin_unlock+0x40/0x40 [ 243.338879][ C0] futex_wait_queue_me+0x1a4/0x480 [ 243.338900][ C0] futex_wait+0x2f8/0x740 [ 243.338915][ C0] ? plist_del+0x3ed/0x410 [ 243.338933][ C0] ? do_futex+0x1810/0x1810 [ 243.338950][ C0] ? __remove_hrtimer+0x4b0/0x4b0 [ 243.338964][ C0] ? mark_lock+0x98/0x340 [ 243.338986][ C0] do_futex+0x1414/0x1810 [ 243.339005][ C0] ? ktime_get+0x7f/0x270 [ 243.339018][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 243.339033][ C0] ? print_irqtrace_events+0x210/0x210 [ 243.339056][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 243.339089][ C0] ? ktime_get+0x7f/0x270 [ 243.339103][ C0] ? seqcount_lockdep_reader_access+0x153/0x220 [ 243.339119][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 243.339136][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 243.339153][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 243.339168][ C0] ? get_timespec64+0x197/0x270 [ 243.339185][ C0] ? read_lock_is_recursive+0x10/0x10 [ 243.339200][ C0] ? timespec64_add_safe+0x220/0x220 [ 243.339219][ C0] ? ktime_get+0x242/0x270 [ 243.339234][ C0] __se_sys_futex+0x407/0x490 [ 243.339264][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 243.339282][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 243.339299][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 243.339316][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 243.339333][ C0] do_syscall_64+0x3b/0xb0 [ 243.339347][ C0] ? clear_bhb_loop+0x15/0x70 [ 243.339360][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.339377][ C0] RIP: 0033:0x7f5da92afff9 [ 243.339404][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.339415][ C0] RSP: 002b:00007ffd4a120fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.339429][ C0] RAX: ffffffffffffffda RBX: 00007ffd4a121110 RCX: 00007f5da92afff9 [ 243.339440][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5da946813c [ 243.339453][ C0] RBP: 00007f5da946813c R08: 0000000000000010 R09: 00007ffd4a1212df [ 243.339462][ C0] R10: 00007ffd4a1210f0 R11: 0000000000000246 R12: 0000000000021b19 [ 243.339472][ C0] R13: 00007ffd4a1210f0 R14: 0000000000000032 R15: 0000000000021ae7 [ 243.339487][ C0] [ 243.339950][ C1] task:kworker/0:4 state:R running task stack:24992 pid: 3615 ppid: 2 flags:0x00004000 [ 243.946908][ C1] Workqueue: events_power_efficient gc_worker [ 243.952977][ C1] Call Trace: [ 243.956257][ C1] [ 243.959192][ C1] __schedule+0x12c4/0x45b0 [ 243.963730][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 243.968768][ C1] ? mark_lock+0x98/0x340 [ 243.973096][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 243.979075][ C1] ? release_firmware_map_entry+0x190/0x190 [ 243.984970][ C1] ? mark_lock+0x98/0x340 [ 243.989299][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 243.994587][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 243.999707][ C1] ? __cond_resched+0x20/0x20 [ 244.004430][ C1] irqentry_exit+0x53/0x80 [ 244.008851][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 244.014310][ C1] RIP: 0010:gc_worker+0x355/0x14b0 [ 244.019423][ C1] Code: ef f8 eb 19 f3 90 8b 1d e9 02 59 05 f6 c3 01 74 07 e8 2f 61 ef f8 eb ec e8 28 61 ef f8 8b 0d b6 02 59 05 4c 8b 35 a3 02 59 05 <8b> 05 c5 02 59 05 39 d8 75 a6 48 8b 5c 24 18 48 89 df 48 89 8c 24 [ 244.039048][ C1] RSP: 0018:ffffc90003287b00 EFLAGS: 00000293 [ 244.045113][ C1] RAX: ffffffff8890f92d RBX: 0000000000000000 RCX: 0000000000040000 [ 244.053080][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.061043][ C1] RBP: ffffc90003287c50 R08: ffffffff8890f921 R09: fffffbfff20e242b [ 244.069015][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff96c2df20 [ 244.076993][ C1] R13: dffffc0000000000 R14: ffff888029400000 R15: 0000000000004000 [ 244.084986][ C1] ? gc_worker+0x321/0x14b0 [ 244.089496][ C1] ? gc_worker+0x32d/0x14b0 [ 244.094027][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 244.100013][ C1] ? print_irqtrace_events+0x210/0x210 [ 244.105482][ C1] ? init_conntrack+0x1740/0x1740 [ 244.110542][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 244.115756][ C1] process_one_work+0x8a1/0x10c0 [ 244.120715][ C1] ? worker_detach_from_pool+0x260/0x260 [ 244.126356][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 244.131907][ C1] ? kthread_data+0x4e/0xc0 [ 244.136427][ C1] ? wq_worker_running+0x97/0x170 [ 244.141468][ C1] worker_thread+0xaca/0x1280 [ 244.146182][ C1] kthread+0x3f6/0x4f0 [ 244.150255][ C1] ? rcu_lock_release+0x20/0x20 [ 244.155118][ C1] ? kthread_blkcg+0xd0/0xd0 [ 244.159719][ C1] ret_from_fork+0x1f/0x30 [ 244.164173][ C1] [ 244.167198][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g17013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 244.178387][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 244.188353][ C1] rcu: RCU grace-period kthread stack dump: [ 244.194233][ C1] task:rcu_preempt state:R running task stack:26816 pid: 15 ppid: 2 flags:0x00004000 [ 244.205020][ C1] Call Trace: [ 244.208300][ C1] [ 244.211237][ C1] __schedule+0x12c4/0x45b0 [ 244.215846][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 244.221767][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 244.227680][ C1] ? __mod_timer+0xa8e/0xeb0 [ 244.232274][ C1] ? release_firmware_map_entry+0x190/0x190 [ 244.238171][ C1] ? mod_timer_pending+0x20/0x20 [ 244.243129][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 244.248510][ C1] schedule+0x11b/0x1f0 [ 244.252668][ C1] schedule_timeout+0x1b9/0x300 [ 244.257526][ C1] ? console_conditional_schedule+0x40/0x40 [ 244.263427][ C1] ? update_process_times+0x200/0x200 [ 244.268827][ C1] ? prepare_to_swait_event+0x321/0x340 [ 244.274382][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 244.279245][ C1] ? dump_blkd_tasks+0x810/0x810 [ 244.284190][ C1] ? rcu_gp_init+0x1140/0x1140 [ 244.288977][ C1] ? finish_swait+0xc5/0x1d0 [ 244.293582][ C1] rcu_gp_kthread+0xa4/0x360 [ 244.298207][ C1] ? _raw_spin_unlock+0x40/0x40 [ 244.303084][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.308190][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 244.314091][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 244.319119][ C1] kthread+0x3f6/0x4f0 [ 244.323191][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.328313][ C1] ? kthread_blkcg+0xd0/0xd0 [ 244.332912][ C1] ret_from_fork+0x1f/0x30 [ 244.337340][ C1] [ 244.340354][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 244.346664][ C1] NMI backtrace for cpu 1 [ 244.350982][ C1] CPU: 1 PID: 4994 Comm: syz.3.421 Not tainted 5.15.167-syzkaller #0 [ 244.359047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.369098][ C1] Call Trace: [ 244.372372][ C1] [ 244.375219][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 244.379904][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 244.385540][ C1] ? panic+0x860/0x860 [ 244.389628][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 244.394606][ C1] ? __wake_up_klogd+0xd5/0x100 [ 244.399475][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 244.405629][ C1] ? _printk+0xd1/0x120 [ 244.409808][ C1] ? cpu_online+0x1f/0x40 [ 244.414144][ C1] ? panic+0x860/0x860 [ 244.418226][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 244.424306][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 244.430307][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 244.436474][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 244.441956][ C1] ? print_cpu_stall+0x600/0x600 [ 244.446902][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 244.451945][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 244.457154][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 244.462367][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 244.467221][ C1] ? hrtimer_run_queues+0x163/0x450 [ 244.472418][ C1] ? account_process_tick+0x232/0x3a0 [ 244.477796][ C1] update_process_times+0x196/0x200 [ 244.483001][ C1] tick_sched_timer+0x386/0x550 [ 244.487851][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 244.493396][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 244.498622][ C1] ? hrtimer_interrupt+0x980/0x980 [ 244.503742][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 244.509817][ C1] hrtimer_interrupt+0x392/0x980 [ 244.514783][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 244.520771][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 244.526405][ C1] [ 244.529331][ C1] [ 244.532277][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 244.538256][ C1] RIP: 0010:smp_call_function_many_cond+0xaa1/0xd90 [ 244.544857][ C1] Code: 44 89 fe 83 e6 01 31 ff e8 8c cc 0b 00 41 83 e7 01 75 07 e8 21 c9 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 fc c8 0b 00 eb db 44 [ 244.564476][ C1] RSP: 0018:ffffc90002cf7220 EFLAGS: 00000246 [ 244.570543][ C1] RAX: 0000000000000000 RBX: 1ffff11017208541 RCX: 0000000000040000 [ 244.578510][ C1] RDX: ffffc900045b0000 RSI: 000000000003ffff RDI: 0000000000040000 [ 244.586481][ C1] RBP: ffffc90002cf7360 R08: ffffffff81749144 R09: fffffbfff20e241a [ 244.594449][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 244.602419][ C1] R13: ffff8880b9042a08 R14: ffff8880b913b380 R15: 0000000000000001 [ 244.610398][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 244.616413][ C1] ? flush_tlb_all+0x20/0x20 [ 244.621013][ C1] ? smp_call_function_many+0x30/0x30 [ 244.626393][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 244.631423][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 244.636614][ C1] ? flush_tlb_all+0x20/0x20 [ 244.641197][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 244.646308][ C1] __purge_vmap_area_lazy+0x294/0x1740 [ 244.651766][ C1] ? cpumask_next+0xc3/0xf0 [ 244.656264][ C1] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 244.662590][ C1] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 244.668912][ C1] ? _vm_unmap_aliases+0x441/0x4e0 [ 244.674034][ C1] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 244.680372][ C1] _vm_unmap_aliases+0x453/0x4e0 [ 244.685318][ C1] change_page_attr_set_clr+0x308/0x1050 [ 244.690974][ C1] ? __set_memory_prot+0x100/0x100 [ 244.696098][ C1] ? find_vm_area+0xf9/0x130 [ 244.700691][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 244.705712][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 244.710747][ C1] set_memory_ro+0xa1/0xe0 [ 244.715163][ C1] ? set_memory_nx+0x130/0x130 [ 244.719931][ C1] ? _raw_spin_unlock+0x24/0x40 [ 244.724801][ C1] bpf_int_jit_compile+0xbf57/0xc6e0 [ 244.730139][ C1] ? emit_bpf_dispatcher+0xd90/0xd90 [ 244.735444][ C1] ? ktime_get_with_offset+0x101/0x320 [ 244.740913][ C1] ? seqcount_lockdep_reader_access+0x153/0x220 [ 244.747150][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 244.752350][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 244.757638][ C1] bpf_prog_select_runtime+0x701/0x9f0 [ 244.763098][ C1] ? memset+0x1f/0x40 [ 244.767080][ C1] ? bpf_obj_name_cpy+0x186/0x1d0 [ 244.772133][ C1] bpf_prog_load+0x131c/0x1b60 [ 244.776907][ C1] ? map_freeze+0x360/0x360 [ 244.781406][ C1] ? __might_fault+0xb8/0x110 [ 244.786121][ C1] ? __might_fault+0xb4/0x110 [ 244.790794][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 244.795120][ C1] ? security_bpf+0x7d/0xa0 [ 244.799624][ C1] __sys_bpf+0x343/0x670 [ 244.803866][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 244.809250][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 244.815228][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 244.820427][ C1] __x64_sys_bpf+0x78/0x90 [ 244.824842][ C1] do_syscall_64+0x3b/0xb0 [ 244.829275][ C1] ? clear_bhb_loop+0x15/0x70 [ 244.833946][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.839838][ C1] RIP: 0033:0x7ff8b3cdfff9 [ 244.844257][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.863866][ C1] RSP: 002b:00007ff8b2158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.872282][ C1] RAX: ffffffffffffffda RBX: 00007ff8b3e97f80 RCX: 00007ff8b3cdfff9 [ 244.880249][ C1] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000005 [ 244.888218][ C1] RBP: 00007ff8b3d52296 R08: 0000000000000000 R09: 0000000000000000 [ 244.896205][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.904167][ C1] R13: 0000000000000000 R14: 00007ff8b3e97f80 R15: 00007fffa0b1e458 [ 244.912149][ C1]