last executing test programs: 1m7.163176422s ago: executing program 3 (id=72): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xfffffffb, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffdfd, 0x2000000}}]}}}]}, 0x58}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m3.609592801s ago: executing program 3 (id=76): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setrlimit(0x8, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 1m2.631316547s ago: executing program 3 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 1m1.276422224s ago: executing program 3 (id=90): socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3800106, &(0x7f0000000600)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@resgid}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x6}}, {@data_err_ignore}]}, 0x6, 0x444, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000140)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) 58.880052827s ago: executing program 3 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r6, 0x1, 0x0, 0x0, {{0x8}, {@void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 52.287131172s ago: executing program 3 (id=112): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x151802, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) fallocate(r3, 0x0, 0x0, 0x40002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xfea7) io_setup(0x205, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x1, 0x0, r2, &(0x7f0000000000)="02", 0x8800000}]) fallocate(r1, 0x8, 0x0, 0x40000) 51.294128657s ago: executing program 32 (id=112): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x151802, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) fallocate(r3, 0x0, 0x0, 0x40002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xfea7) io_setup(0x205, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x1, 0x0, r2, &(0x7f0000000000)="02", 0x8800000}]) fallocate(r1, 0x8, 0x0, 0x40000) 9.317985871s ago: executing program 0 (id=247): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 9.31607024s ago: executing program 2 (id=248): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 9.31543073s ago: executing program 4 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 9.210737751s ago: executing program 0 (id=251): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xfeb4, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb83b5", 0x30, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x1, @local, @ipv4={'\x00', '\xff\xff', @loopback}, [], "3be3bdbd215f67211734bfb8dfdfd6520f26362049478000000000000000653120f383a2021e52f2b4b646482011a30e137ed4a6944d28748b856308a5368c16f11c305e904a"}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x50, 0x0, 0x0, 0xb35}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}]}, 0x58}}, 0x0) 8.305427116s ago: executing program 4 (id=252): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@rodir}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001dc0)=""/4113, 0x55d) 7.211298782s ago: executing program 5 (id=256): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x40000a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)={0x3, 0x0, [{0x518056eeefc34830, 0x1000, &(0x7f0000003880)=""/4096}, {0x8080000, 0x91, &(0x7f0000000740)=""/145}, {0xffff1000, 0xb8, &(0x7f00000008c0)=""/184}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=""/66, 0x0, &(0x7f0000002840)=""/4101}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.991531893s ago: executing program 0 (id=257): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3) 6.981936843s ago: executing program 1 (id=267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x140049, 0x4) 6.205385187s ago: executing program 2 (id=258): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 6.163973867s ago: executing program 5 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4.724796305s ago: executing program 2 (id=260): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r2, r3, 0x0) fchdir(r4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x80000200) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) 4.724620425s ago: executing program 4 (id=261): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x0, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.704372815s ago: executing program 0 (id=262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) recvmmsg(r0, 0x0, 0x0, 0x1020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x32, 0x1, 0x85, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) 4.655127305s ago: executing program 1 (id=263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fallocate(r5, 0x0, 0x0, 0x8) copy_file_range(r5, 0x0, r4, 0x0, 0x3ff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 4.585153546s ago: executing program 5 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000005640)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000003780), &(0x7f00000037c0)={0x5}, &(0x7f0000003800)={0x9}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) fchown(r1, 0x0, 0x0) 4.495050786s ago: executing program 2 (id=265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0) statx(0xffffffffffffffff, 0x0, 0x7400, 0x404, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) shutdown(r0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8800) 4.409840577s ago: executing program 1 (id=266): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4001) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r1) close(r0) 4.335818537s ago: executing program 0 (id=268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffecf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='P\x14\x00\x02\x00\x00\x00\x01\x00', 0x3) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 3.248775953s ago: executing program 1 (id=269): r0 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r1, 0x5457, 0x1000000000000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000440)="1ea3734bb7d8b86d1d1a561e270de146b03e1547d7b3d23afe6d24230af0165a6f4f4e54f5b811bf8fcf8a3e8cf7a9cf63ab1034f4d975f9bfaf1df704788817f49d45e5a599170679692cf6dc55df86f0355bfd493184cfcc08c6401244c0c0486c46312ba30ff578ef9779357f66c5f29c727fdd1891b8a8255e8e99ea34bef6d4f00e089c6f0e2aa5d6ee5631c9ec233c680add90fc231506dcd9828d7bbc92303f83862e0589e7a8c73a369765e17f96b0f89e51db4bbe64f007e5610c7b60a52a132bb9ae7afd380026ab4ea5eea1a6e32e9fc3e2a4e7671bd8aee393e49aca6ccf7baa8911ce3c9ab3fc05a16d9ed56cbebd99674cc1ff3c79a43b21e6") sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES8=r3], 0x232) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x8001ff, 0x2) 3.248028573s ago: executing program 5 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "eb428edff76dfb8a5421e90d9a0c27a2737bb4e15be1ac96fd5f67778dcd1136ea573155a1e92e47bf28841d0fe60cb5c38c0357e90438a34c92cba1be5695a1"}, 0x48, 0xfffffffffffffff8) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r3, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 3.213097553s ago: executing program 0 (id=270): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.202161093s ago: executing program 2 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280), 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x37) close(r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 2.971186454s ago: executing program 4 (id=272): socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.080455659s ago: executing program 5 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) 1.163492254s ago: executing program 4 (id=274): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3) 1.162823894s ago: executing program 1 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x20050800) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 969.850065ms ago: executing program 5 (id=276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40), 0x4000000000000aa, 0x0) 79.20348ms ago: executing program 1 (id=277): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r2, r3, 0x0) fchdir(r4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x80000200) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) 70.90936ms ago: executing program 2 (id=278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fallocate(r5, 0x0, 0x0, 0x8) copy_file_range(r5, 0x0, r4, 0x0, 0x3ff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 0s ago: executing program 4 (id=280): mq_notify(0xffffffffffffffff, 0x0) unshare(0x68060200) r0 = socket$inet6(0xa, 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) preadv2(r0, &(0x7f0000002480)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/112, 0x70}], 0x5, 0x4, 0x2b9, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e1f, 0x0, 'ovf\x00'}, 0x2c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x61, "7d3f13d211e28da837670896c9eb7029a3ff84a793ade93dae9c0972ca9f66cd42c2343e552eee80d576cd1abe4f4a5f40f1a217e9119d25fb6196fec71980889fb622f90aea994fec32b20b62e6e8bd98dcc3f2b7214e7a078a6f90c9f5a201fd"}, &(0x7f0000000000)=0x69) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x8, @empty, 0x6}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, @in6={0xa, 0x4e20, 0x1e, @mcast1, 0xded}]}, &(0x7f0000000200)=0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. [ 44.736009][ T4018] cgroup: Unknown subsys name 'net' [ 44.962359][ T4018] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.264286][ T4018] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 46.617055][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 46.628196][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 46.634049][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 46.737479][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.738995][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.741159][ T4033] device bridge_slave_0 entered promiscuous mode [ 46.767535][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.769069][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.771181][ T4033] device bridge_slave_1 entered promiscuous mode [ 46.788607][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.790255][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.792322][ T4029] device bridge_slave_0 entered promiscuous mode [ 46.808432][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.809895][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.812094][ T4029] device bridge_slave_1 entered promiscuous mode [ 46.828567][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.830487][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.831940][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.834115][ T4035] device bridge_slave_0 entered promiscuous mode [ 46.848935][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.853241][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.855285][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.857597][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.859727][ T4035] device bridge_slave_1 entered promiscuous mode [ 46.876331][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.883730][ T4038] chnl_net:caif_netlink_parms(): no params data found [ 46.893333][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.923530][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.937786][ T4029] team0: Port device team_slave_0 added [ 46.958653][ T4033] team0: Port device team_slave_0 added [ 46.967134][ T4029] team0: Port device team_slave_1 added [ 46.975030][ T4033] team0: Port device team_slave_1 added [ 46.991408][ T4035] team0: Port device team_slave_0 added [ 46.994462][ T4035] team0: Port device team_slave_1 added [ 47.026300][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 47.032606][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.034092][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.040045][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.052106][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.053423][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.058717][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.065433][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.067545][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.072806][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.076628][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.078178][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.083660][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.090562][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.092103][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.102234][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.105348][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.106972][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.112093][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.146565][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.148019][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.150125][ T4038] device bridge_slave_0 entered promiscuous mode [ 47.166424][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.167874][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.170055][ T4038] device bridge_slave_1 entered promiscuous mode [ 47.218065][ T4035] device hsr_slave_0 entered promiscuous mode [ 47.276312][ T4035] device hsr_slave_1 entered promiscuous mode [ 47.380866][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.417815][ T4033] device hsr_slave_0 entered promiscuous mode [ 47.466307][ T4033] device hsr_slave_1 entered promiscuous mode [ 47.515982][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.517838][ T4033] Cannot create hsr debugfs directory [ 47.558010][ T4029] device hsr_slave_0 entered promiscuous mode [ 47.606350][ T4029] device hsr_slave_1 entered promiscuous mode [ 47.646024][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.647590][ T4029] Cannot create hsr debugfs directory [ 47.649061][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.650566][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.652861][ T4037] device bridge_slave_0 entered promiscuous mode [ 47.665736][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.667407][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.669529][ T4037] device bridge_slave_1 entered promiscuous mode [ 47.672990][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.749920][ T4038] team0: Port device team_slave_0 added [ 47.753141][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.769827][ T4038] team0: Port device team_slave_1 added [ 47.780342][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.798462][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.799961][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.805197][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.824282][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.825656][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.832340][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.847703][ T4037] team0: Port device team_slave_0 added [ 47.869204][ T4037] team0: Port device team_slave_1 added [ 47.977935][ T4038] device hsr_slave_0 entered promiscuous mode [ 48.016234][ T4038] device hsr_slave_1 entered promiscuous mode [ 48.075936][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.077428][ T4038] Cannot create hsr debugfs directory [ 48.085418][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.087005][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.092033][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.095930][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.097262][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.102410][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.207866][ T4037] device hsr_slave_0 entered promiscuous mode [ 48.256308][ T4037] device hsr_slave_1 entered promiscuous mode [ 48.296021][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.297635][ T4037] Cannot create hsr debugfs directory [ 48.356545][ T4042] Bluetooth: hci0: command 0x0409 tx timeout [ 48.363864][ T4035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.410313][ T4035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.435971][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 48.447877][ T4035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.525945][ T4042] Bluetooth: hci4: command 0x0409 tx timeout [ 48.527298][ T4042] Bluetooth: hci3: command 0x0409 tx timeout [ 48.528655][ T4042] Bluetooth: hci2: command 0x0409 tx timeout [ 48.537723][ T4035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.656958][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.703679][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.744004][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.790362][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.860773][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.868859][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.872434][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.884346][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.886841][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.927841][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.004754][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.063408][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.099120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.101396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.103871][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.105527][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.110839][ T4037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.150533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.156558][ T4037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.197792][ T4037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.247897][ T4037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.302374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.304533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.309122][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.310657][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.313671][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.334149][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.348505][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.351058][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.354501][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.373746][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.377334][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.387008][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.389252][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.410676][ T4038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.449489][ T4038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.488470][ T4038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.528113][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.530711][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.534714][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.544448][ T4038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.606397][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.644757][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.650065][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.654549][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.679629][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.681946][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.683970][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.685479][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.690106][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.713367][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.723635][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.727449][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.729561][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.731024][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.732792][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.740703][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.760032][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.761998][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.764706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.767167][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.770893][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.782455][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.787307][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.789977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.809169][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.811283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.813648][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.816367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.818520][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.820596][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.822124][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.824019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.840998][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.844938][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.848601][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.850924][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.853184][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.855478][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.857014][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.862694][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.864900][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.880827][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.911079][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.913615][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.916626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.918657][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.932264][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.935714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.945034][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.948530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.950919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.953612][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.979315][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.982272][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.984205][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.985858][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.988650][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.990948][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.993159][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.995303][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.009049][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.011001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.013148][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.021097][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.034914][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.040277][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.042536][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.044576][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.046095][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.050149][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.051894][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.053520][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.055671][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.066981][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.069120][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.071219][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.073557][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.088898][ T4035] device veth0_vlan entered promiscuous mode [ 50.104200][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.107261][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.109610][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.111912][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.114184][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.119585][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.121848][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.124102][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.127750][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.139143][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.147833][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.153888][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.156463][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.165153][ T4035] device veth1_vlan entered promiscuous mode [ 50.182166][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.184530][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.187485][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.189053][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.204729][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.228191][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.230408][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.232627][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.235076][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.236630][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.246401][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.257792][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.260076][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.261994][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.263412][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.265346][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.270805][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.298526][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.305278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.307785][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.320082][ T4035] device veth0_macvtap entered promiscuous mode [ 50.327715][ T4035] device veth1_macvtap entered promiscuous mode [ 50.341037][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.343199][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.345449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.350208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.352337][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.354788][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.363379][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.381657][ T4029] device veth0_vlan entered promiscuous mode [ 50.386175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.388220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.390316][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.392335][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.394267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.397341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.399769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.403420][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.405668][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.422856][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.430585][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.436018][ T4039] Bluetooth: hci0: command 0x041b tx timeout [ 50.439040][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.441327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.443530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.446117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.452557][ T4029] device veth1_vlan entered promiscuous mode [ 50.461391][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.468365][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.470477][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.472592][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.474804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.478543][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.480598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.485053][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.490857][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.492840][ T4035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.494601][ T4035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.497610][ T4035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.514853][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.518020][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.526314][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 50.541657][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.543996][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.585097][ T4037] device veth0_vlan entered promiscuous mode [ 50.593387][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.595566][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.599630][ T4079] Bluetooth: hci2: command 0x041b tx timeout [ 50.601027][ T4079] Bluetooth: hci3: command 0x041b tx timeout [ 50.602259][ T4079] Bluetooth: hci4: command 0x041b tx timeout [ 50.604223][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.608784][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.611158][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.613169][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.615161][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.618353][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.622148][ T4029] device veth0_macvtap entered promiscuous mode [ 50.642062][ T4029] device veth1_macvtap entered promiscuous mode [ 50.674447][ T4033] device veth0_vlan entered promiscuous mode [ 50.678829][ T4037] device veth1_vlan entered promiscuous mode [ 50.702030][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.704162][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.709037][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.721921][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.724196][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.726725][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.728764][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.730915][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.733273][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.742676][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.747800][ T4033] device veth1_vlan entered promiscuous mode [ 50.749988][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.752104][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.755335][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.761831][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.763664][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.765369][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.768607][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.773422][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.776185][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.777805][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.779486][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.781835][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.790413][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.792164][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.804000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.832024][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.834330][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.839276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.842044][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.844465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.867475][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.868094][ T4037] device veth0_macvtap entered promiscuous mode [ 50.869151][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.874212][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.877819][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.897713][ T4037] device veth1_macvtap entered promiscuous mode [ 50.952184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.954508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.960193][ T4033] device veth0_macvtap entered promiscuous mode [ 50.990078][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.992196][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.994135][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.000615][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.002225][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.005616][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.009380][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.015346][ T4033] device veth1_macvtap entered promiscuous mode [ 51.018815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.020918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.023031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.025119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.028412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.030638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.033055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.051695][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.053856][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.056825][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.058907][ T4105] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 51.058914][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.061753][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.064888][ T4038] device veth0_vlan entered promiscuous mode [ 51.068454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.070351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.072359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.075197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.114374][ T4037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.116437][ T4037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.118366][ T4037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.120299][ T4037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123751][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.128091][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.130900][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.133161][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.135643][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.138372][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.142270][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.155362][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.158414][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.160555][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.162837][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.165187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.193193][ T4038] device veth1_vlan entered promiscuous mode [ 51.203650][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.206545][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.209235][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.211778][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.213935][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.218654][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.222332][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.251888][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.270181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.274124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.313454][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.315222][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.324993][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.332751][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.411051][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.412907][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.419722][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.421792][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.492176][ T4038] device veth0_macvtap entered promiscuous mode [ 51.510099][ T4038] device veth1_macvtap entered promiscuous mode [ 51.569080][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.571203][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.573288][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.575483][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.579498][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.581564][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.583649][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.585657][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.597658][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.620354][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.622655][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.625237][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.630842][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.632997][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.637594][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.639959][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.640313][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.642158][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.645128][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.648202][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.652926][ T4038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.654751][ T4038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.657320][ T4038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.659130][ T4038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.668735][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.672054][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.674354][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.437146][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.439485][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.450353][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.453660][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.456448][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.458938][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.533816][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 52.566780][ T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.569652][ T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.589807][ T4120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'. [ 52.616882][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.620614][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 52.679673][ T4120] Zero length message leads to an empty skb [ 52.689383][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.691208][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.694829][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.700428][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 52.701772][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 52.703246][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 52.917452][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.919266][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.921838][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.949986][ T4132] binder: 4130:4132 tried to acquire reference to desc 0, got 1 instead [ 52.966613][ T4132] binder: 4130:4132 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.969542][ T4132] binder: 4132 RLIMIT_NICE not set [ 52.970758][ T4132] binder: 4132 RLIMIT_NICE not set [ 52.971978][ T4132] binder: send failed reply for transaction 5 to 4130:4132 [ 52.973810][ T4132] binder: 4130:4132 transaction 5 fd fixups failed 29201/-12, line 4507 [ 53.016364][ T13] binder: undelivered TRANSACTION_COMPLETE [ 53.017731][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.066679][ T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.068445][ T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.071456][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.047893][ T4137] kernel profiling enabled (shift: 17) [ 54.325182][ T4148] tipc: Started in network mode [ 54.326988][ T4148] tipc: Node identity 4, cluster identity 4711 [ 54.328243][ T4148] tipc: Node number set to 4 [ 54.330492][ T4145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 55.159256][ T3605] Bluetooth: hci0: command 0x0419 tx timeout [ 55.162008][ T3605] Bluetooth: hci1: command 0x0419 tx timeout [ 55.163236][ T3605] Bluetooth: hci2: command 0x0419 tx timeout [ 55.164532][ T3605] Bluetooth: hci3: command 0x0419 tx timeout [ 55.166040][ T3605] Bluetooth: hci4: command 0x0419 tx timeout [ 55.408874][ T4161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 55.426727][ T4161] netlink: 'syz.3.19': attribute type 4 has an invalid length. [ 55.428422][ T4161] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19'. [ 56.783439][ T4173] binder: 4169:4173 tried to acquire reference to desc 0, got 1 instead [ 56.812135][ T4173] binder: 4169:4173 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.821576][ T4173] binder: 4173 RLIMIT_NICE not set [ 57.627365][ T3605] binder: undelivered TRANSACTION_COMPLETE [ 57.628795][ T3605] binder: undelivered TRANSACTION_COMPLETE [ 57.742023][ T3605] binder: undelivered transaction 11, process died. [ 57.962140][ T26] audit: type=1326 audit(57.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4185 comm="syz.4.26" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d8ae828 code=0x0 [ 57.991429][ T4197] binder: 4196:4197 ioctl c0306201 20000240 returned -14 [ 58.004629][ T4197] binder: 4196:4197 tried to acquire reference to desc 0, got 1 instead [ 58.018057][ T4197] binder: release 4196:4197 transaction 16 out, still active [ 58.055993][ T4197] binder: undelivered TRANSACTION_COMPLETE [ 58.081017][ T4072] binder: send failed reply for transaction 16, target dead [ 58.491031][ T4216] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 58.492659][ T4216] PKCS7: Only support pkcs7_signedData type [ 59.338594][ T4219] binder: BINDER_SET_CONTEXT_MGR already set [ 59.340027][ T4219] binder: 4217:4219 ioctl 4018620d 20000040 returned -16 [ 59.422699][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 59.557272][ T4231] binder: 4230:4231 tried to acquire reference to desc 0, got 1 instead [ 59.563034][ T4231] binder: 4230:4231 got transaction with invalid data ptr [ 59.569904][ T4231] binder: 4230:4231 transaction failed 29201/-14, size 6144-24 line 3186 [ 59.577812][ T4106] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.681454][ T4223] input: syz0 as /devices/virtual/input/input2 [ 60.408672][ T4238] mkiss: ax0: crc mode is auto. [ 61.606817][ T4249] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 61.655033][ T4251] binder: 4250:4251 tried to acquire reference to desc 0, got 1 instead [ 61.673877][ T3321] binder: release 4250:4251 transaction 28 out, still active [ 61.675421][ T3321] binder: undelivered TRANSACTION_COMPLETE [ 61.678608][ T3321] binder: undelivered TRANSACTION_COMPLETE [ 61.714260][ T3321] binder: undelivered transaction 27, process died. [ 61.715777][ T3321] binder: send failed reply for transaction 28, target dead [ 61.743206][ T4254] loop4: detected capacity change from 0 to 512 [ 61.787051][ T4254] ======================================================= [ 61.787051][ T4254] WARNING: The mand mount option has been deprecated and [ 61.787051][ T4254] and is ignored by this kernel. Remove the mand [ 61.787051][ T4254] option from the mount to silence this warning. [ 61.787051][ T4254] ======================================================= [ 61.802108][ T4257] loop1: detected capacity change from 0 to 1024 [ 61.827881][ T4254] EXT4-fs (loop4): bad s_min_extra_isize: 65535 [ 61.926949][ T4234] loop0: detected capacity change from 0 to 32768 [ 62.094175][ T4263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'. [ 62.124414][ T4243] loop3: detected capacity change from 0 to 32768 [ 62.139726][ T4263] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.395188][ T4275] loop0: detected capacity change from 0 to 2048 [ 64.596740][ T4275] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 64.612048][ T4275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.683653][ T4275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.55'. [ 66.415797][ C0] sched: RT throttling activated [ 66.594646][ T4294] loop0: detected capacity change from 0 to 1024 [ 66.624936][ T4297] device vlan2 entered promiscuous mode [ 67.994757][ T4303] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 68.892873][ T4303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.760799][ T7] cfg80211: failed to load regulatory.db [ 69.821518][ T4317] loop4: detected capacity change from 0 to 512 [ 69.997940][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.999428][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.030143][ T4317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.861214][ T4317] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.71: corrupted inode contents [ 70.873604][ T4317] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.71: mark_inode_dirty error [ 70.888933][ T4317] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.71: corrupted inode contents [ 70.896720][ T4317] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.71: mark_inode_dirty error [ 70.905748][ T4317] Quota error (device loop4): write_blk: dquota write failed [ 70.917153][ T4317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 70.919147][ T4317] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.71: Failed to acquire dquot type 0 [ 71.013151][ T4317] EXT4-fs (loop4): 1 orphan inode deleted [ 71.014365][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.944061][ T4377] loop3: detected capacity change from 0 to 512 [ 75.968878][ T4373] loop0: detected capacity change from 0 to 1024 [ 75.979027][ T4377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.169621][ T4375] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 76.181723][ T4373] EXT4-fs (loop0): Ignoring removed orlov option [ 76.183079][ T4373] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 76.193273][ T4377] EXT4-fs (loop3): 1 orphan inode deleted [ 76.194444][ T4377] EXT4-fs (loop3): 1 truncate cleaned up [ 76.195582][ T4377] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000000007,noload,journal_dev=0x0000000000000003,stripe=0x0000000000000006,data_err=ignore,. Quota mode: none. [ 77.084917][ T4373] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 78.320393][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block [ 78.356433][ T4033] EXT4-fs (loop3): Remounting filesystem read-only [ 78.358108][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block [ 78.366664][ T4033] EXT4-fs (loop3): Remounting filesystem read-only [ 80.367055][ T4421] loop1: detected capacity change from 0 to 256 [ 80.390824][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 80.394348][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 80.410859][ T4421] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 80.412470][ T4421] UDF-fs: Scanning with blocksize 512 failed [ 80.416750][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 80.502339][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.843865][ T4476] loop2: detected capacity change from 0 to 512 [ 86.863730][ T4391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.934813][ T4476] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 86.957083][ T4391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.965426][ T4478] process 'syz.1.119' launched './file1' with NULL argv: empty string added [ 87.086001][ T4484] loop4: detected capacity change from 0 to 512 [ 87.096643][ T4484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.157473][ T4484] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.121: bad orphan inode 131083 [ 87.162728][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.116: inode #1: comm syz.2.116: iget: illegal inode # [ 87.173299][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,nolazytime,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 87.180562][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.116: error while reading EA inode 1 err=-117 [ 87.185706][ T4476] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.729264][ T4391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.729482][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.116: inode #1: comm syz.2.116: iget: illegal inode # [ 87.943313][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.116: error while reading EA inode 1 err=-117 [ 87.977560][ T4476] EXT4-fs (loop2): 1 orphan inode deleted [ 87.978796][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 88.119305][ T4391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.962733][ T4479] chnl_net:caif_netlink_parms(): no params data found [ 89.080026][ T4073] Bluetooth: hci1: command 0x0409 tx timeout [ 89.115608][ T4513] 9pnet_virtio: no channels available for device syz [ 89.206681][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.215709][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.225703][ T4479] device bridge_slave_0 entered promiscuous mode [ 89.237087][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240974][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244771][ T4479] device bridge_slave_1 entered promiscuous mode [ 89.318614][ T4479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.322631][ T4479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.107427][ T4479] team0: Port device team_slave_0 added [ 90.254878][ T4479] team0: Port device team_slave_1 added [ 90.376987][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.378512][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.383814][ T4479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.427379][ T4548] No such timeout policy "syz0" [ 90.447357][ T4532] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 90.452241][ T4532] device syz_tun entered promiscuous mode [ 90.494588][ T4532] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.511607][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.513085][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.518857][ T4479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.658090][ T4479] device hsr_slave_0 entered promiscuous mode [ 90.706202][ T4479] device hsr_slave_1 entered promiscuous mode [ 90.736145][ T4479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.737776][ T4479] Cannot create hsr debugfs directory [ 91.033697][ T4540] loop1: detected capacity change from 0 to 40427 [ 91.920132][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 91.970267][ T4540] F2FS-fs (loop1): invalid crc value [ 92.007668][ T4540] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.080786][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 92.115482][ T4540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.116439][ T4574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.140'. [ 92.128717][ T4479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.229455][ T4479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.363938][ T4479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.170359][ T4479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.489369][ T4479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.563625][ T4479] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.586372][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.588646][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.594585][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.597341][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.599322][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.600727][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.602598][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.608809][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.610980][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.612865][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.614260][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.719381][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.721843][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.724252][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.727868][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.730179][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.733142][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.735529][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.740526][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.816606][ T4391] device hsr_slave_0 left promiscuous mode [ 93.946145][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.947909][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.950560][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.952065][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.956209][ T4073] Bluetooth: hci1: command 0x040f tx timeout [ 93.956548][ T4391] device bridge_slave_1 left promiscuous mode [ 93.959655][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.030149][ T4391] device bridge_slave_0 left promiscuous mode [ 94.031659][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.094714][ T4391] device hsr_slave_1 left promiscuous mode [ 94.176326][ T4391] device veth1_macvtap left promiscuous mode [ 94.177916][ T4391] device veth0_macvtap left promiscuous mode [ 94.179329][ T4391] device veth1_vlan left promiscuous mode [ 94.180640][ T4391] device veth0_vlan left promiscuous mode [ 94.502590][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 94.512187][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 94.523010][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.547460][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.683182][ T4391] bond0 (unregistering): Released all slaves [ 94.794542][ T4479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.797616][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.799835][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.802204][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.804511][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.934631][ T4479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.945353][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.947334][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.096564][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.099041][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.111018][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.114558][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.140416][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.143952][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.148529][ T4479] device veth0_vlan entered promiscuous mode [ 95.157826][ T4479] device veth1_vlan entered promiscuous mode [ 95.192535][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.194678][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.197362][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.201520][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.213553][ T4479] device veth0_macvtap entered promiscuous mode [ 95.219008][ T4479] device veth1_macvtap entered promiscuous mode [ 95.238771][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.240988][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.243083][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.245223][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.255891][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.258077][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.260009][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.262248][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.265504][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.271251][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.273418][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.275390][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.284208][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.289092][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.291272][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.293418][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.295637][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.301446][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.303783][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.305715][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.308315][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.311483][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.313174][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.315665][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.330177][ T4479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.332003][ T4479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.333789][ T4479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335520][ T4479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392426][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.401627][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.408942][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.413280][ T4168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.414997][ T4168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.420205][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.658713][ T4657] device syzkaller0 entered promiscuous mode [ 95.699938][ T4652] tipc: Started in network mode [ 95.701142][ T4652] tipc: Node identity f7, cluster identity 4711 [ 95.712727][ T4652] tipc: Node number set to 247 [ 96.509687][ T4075] Bluetooth: hci1: command 0x0419 tx timeout [ 96.782479][ T4674] udc-core: couldn't find an available UDC or it's busy [ 96.784287][ T4674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.995079][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.306308][ T4695] binder: 4681:4695 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 98.308457][ T4695] binder: 4681:4695 got reply transaction with no transaction stack [ 98.310132][ T4695] binder: 4681:4695 transaction failed 29201/-71, size 0-0 line 2822 [ 98.921571][ T4073] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.330549][ T4713] loop1: detected capacity change from 0 to 8 [ 99.963787][ T4711] loop4: detected capacity change from 0 to 512 [ 100.007298][ T4713] SQUASHFS error: lzo decompression failed, data probably corrupt [ 100.009210][ T4713] SQUASHFS error: Failed to read block 0x91: -5 [ 100.010397][ T4713] SQUASHFS error: Unable to read metadata cache entry [8f] [ 100.011938][ T4713] SQUASHFS error: Unable to read inode 0x11f [ 100.029384][ T4711] EXT4-fs (loop4): old and new quota format mixing [ 100.293167][ T4725] binder: 4724:4725 tried to acquire reference to desc 0, got 1 instead [ 100.295668][ T4725] binder: 4724:4725 got transaction with invalid data ptr [ 100.297596][ T4725] binder: 4724:4725 transaction failed 29201/-14, size 0-4088 line 3186 [ 100.356764][ T4073] binder: undelivered transaction 34, process died. [ 100.766115][ T4073] binder: undelivered TRANSACTION_COMPLETE [ 100.768023][ T4073] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.278749][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.452911][ T4749] loop2: detected capacity change from 0 to 512 [ 101.491243][ T4753] binder: 4750:4753 tried to acquire reference to desc 0, got 1 instead [ 101.511854][ T4749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.518808][ T4753] binder_alloc: 4750: binder_alloc_buf size -624 failed, no address space [ 101.520740][ T4753] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 101.522699][ T4753] binder: 4750:4753 transaction failed 29201/-28, size 0--626 line 3085 [ 101.545591][ T4749] EXT4-fs (loop2): 1 truncate cleaned up [ 101.547487][ T4749] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 101.589501][ T4042] binder: undelivered TRANSACTION_COMPLETE [ 101.590692][ T4042] binder: undelivered TRANSACTION_COMPLETE [ 101.591984][ T4042] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.605955][ T4042] binder: undelivered transaction 41, process died. [ 101.607381][ T4042] binder: undelivered transaction 40, process died. [ 101.818448][ T4758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 101.820418][ T4758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 101.879521][ T4758] device netdevsim0 entered promiscuous mode [ 101.919087][ T4758] device netdevsim0 left promiscuous mode [ 102.048725][ T4765] tipc: Started in network mode [ 102.049905][ T4765] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 102.051572][ T4765] tipc: Enabled bearer , priority 0 [ 102.357610][ T4779] netlink: 'syz.5.167': attribute type 4 has an invalid length. [ 102.359251][ T4779] netlink: 17 bytes leftover after parsing attributes in process `syz.5.167'. [ 103.161089][ T4075] tipc: Node number set to 11578026 [ 103.166952][ T4791] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.418976][ T4800] loop4: detected capacity change from 0 to 128 [ 104.228424][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.349286][ T4810] loop1: detected capacity change from 0 to 1024 [ 104.435604][ T4810] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 104.654728][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 104.775332][ T4247] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 104.784049][ T4247] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 460 with error 28 [ 104.792226][ T4247] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.792226][ T4247] [ 104.796360][ T4247] EXT4-fs (loop1): Total free blocks count 0 [ 104.806218][ T4247] EXT4-fs (loop1): Free/Dirty block details [ 104.807503][ T4247] EXT4-fs (loop1): free_blocks=68451041280 [ 104.808690][ T4247] EXT4-fs (loop1): dirty_blocks=464 [ 104.809721][ T4247] EXT4-fs (loop1): Block reservation details [ 104.810876][ T4247] EXT4-fs (loop1): i_reserved_data_blocks=29 [ 104.837086][ T4833] netlink: 'syz.5.187': attribute type 10 has an invalid length. [ 104.844704][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.852298][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.161382][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.162986][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.165588][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.167204][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.718022][ T4833] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.808021][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.187'. [ 105.810133][ T4846] device bridge_slave_1 left promiscuous mode [ 105.811460][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.990412][ T4846] device bridge_slave_0 left promiscuous mode [ 105.991776][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.023705][ T4846] bond0: (slave bridge0): Releasing backup interface [ 109.757099][ T4910] loop2: detected capacity change from 0 to 1024 [ 109.770649][ T4908] binder: BINDER_SET_CONTEXT_MGR already set [ 109.779707][ T4908] binder: 4907:4908 ioctl 4018620d 200001c0 returned -16 [ 109.782096][ T4908] binder: 4907:4908 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 109.785149][ T4908] binder: 4908 RLIMIT_NICE not set [ 110.580385][ T4916] binder: 4907:4916 got transaction to invalid handle, 1 [ 110.582051][ T4916] binder: 4907:4916 transaction failed 29201/-22, size 0-0 line 2917 [ 110.612080][ T4910] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 111.086633][ T1535] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.367573][ T4943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.120033][ T4959] loop5: detected capacity change from 0 to 256 [ 114.274748][ T4970] ALSA: mixer_oss: invalid OSS volume 'u' [ 114.641824][ T4959] FAT-fs (loop5): Directory bread(block 64) failed [ 114.670126][ T4959] FAT-fs (loop5): Directory bread(block 65) failed [ 114.716364][ T4959] FAT-fs (loop5): Directory bread(block 66) failed [ 114.745340][ T4959] FAT-fs (loop5): Directory bread(block 67) failed [ 114.773388][ T4959] FAT-fs (loop5): Directory bread(block 68) failed [ 114.796104][ T4959] FAT-fs (loop5): Directory bread(block 69) failed [ 114.814569][ T4959] FAT-fs (loop5): Directory bread(block 70) failed [ 114.851116][ T4959] FAT-fs (loop5): Directory bread(block 71) failed [ 114.876815][ T4959] FAT-fs (loop5): Directory bread(block 72) failed [ 114.894156][ T4959] FAT-fs (loop5): Directory bread(block 73) failed [ 120.071412][ T5011] binder: 5009:5011 ioctl 4018620d 0 returned -22 [ 120.124802][ T5011] loop2: detected capacity change from 0 to 256 [ 120.359764][ T5014] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.387066][ T5014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.153713][ T5031] loop1: detected capacity change from 0 to 256 [ 122.236361][ T5031] FAT-fs (loop1): Directory bread(block 64) failed [ 122.238112][ T5031] FAT-fs (loop1): Directory bread(block 65) failed [ 122.239536][ T5031] FAT-fs (loop1): Directory bread(block 66) failed [ 122.240899][ T5031] FAT-fs (loop1): Directory bread(block 67) failed [ 122.242351][ T5031] FAT-fs (loop1): Directory bread(block 68) failed [ 122.253521][ T4106] kernel read not supported for file /vcs (pid: 4106 comm: kworker/0:7) [ 122.279159][ T5031] FAT-fs (loop1): Directory bread(block 69) failed [ 122.279270][ T5031] FAT-fs (loop1): Directory bread(block 70) failed [ 122.279304][ T5031] FAT-fs (loop1): Directory bread(block 71) failed [ 122.279370][ T5031] FAT-fs (loop1): Directory bread(block 72) failed [ 122.279402][ T5031] FAT-fs (loop1): Directory bread(block 73) failed [ 125.380168][ T5054] dccp_close: ABORT with 32 bytes unread [ 127.967848][ T5101] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 128.002599][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.004386][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.103264][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.104832][ T5101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.106500][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.108017][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.123619][ T5101] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.281683][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 128.475369][ T5107] device bridge_slave_1 left promiscuous mode [ 128.700379][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.929199][ T5121] loop4: detected capacity change from 0 to 256 [ 128.970339][ T5107] device bridge_slave_0 left promiscuous mode [ 128.971922][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.976111][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 129.115117][ T5121] FAT-fs (loop4): Directory bread(block 64) failed [ 129.118782][ T5121] FAT-fs (loop4): Directory bread(block 65) failed [ 129.121264][ T5121] FAT-fs (loop4): Directory bread(block 66) failed [ 129.122917][ T5121] FAT-fs (loop4): Directory bread(block 67) failed [ 129.124378][ T5121] FAT-fs (loop4): Directory bread(block 68) failed [ 129.131928][ T5121] FAT-fs (loop4): Directory bread(block 69) failed [ 129.133442][ T5121] FAT-fs (loop4): Directory bread(block 70) failed [ 129.134978][ T5121] FAT-fs (loop4): Directory bread(block 71) failed [ 129.906065][ T5121] FAT-fs (loop4): Directory bread(block 72) failed [ 129.907560][ T5121] FAT-fs (loop4): Directory bread(block 73) failed [ 129.958729][ T5107] bond0: (slave bridge0): Releasing backup interface [ 130.168606][ T5115] netlink: 'syz.0.251': attribute type 5 has an invalid length. [ 131.153372][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.154726][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.561003][ T26] audit: type=1326 audit(132.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.4.261" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d8ae828 code=0x0 [ 134.115172][ T5197] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 134.151416][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.153711][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.209977][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.211466][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.213293][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.214662][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.085699][ T5197] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.135344][ T5212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.271'. [ 135.159716][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 135.162130][ T5205] device bridge_slave_1 left promiscuous mode [ 135.163448][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.210118][ T5205] device bridge_slave_0 left promiscuous mode [ 135.211551][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.060867][ T5221] loop4: detected capacity change from 0 to 256 [ 136.063772][ T5205] bond0: (slave bridge0): Releasing backup interface [ 136.138490][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.142802][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 136.175616][ T5221] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.181356][ T5221] UDF-fs: Scanning with blocksize 512 failed [ 136.187458][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.240214][ T5221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.204904][ T4901] ------------[ cut here ]------------ [ 137.206150][ T4901] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 137.207768][ T4901] WARNING: CPU: 0 PID: 4901 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288 [ 137.209522][ T4901] Modules linked in: [ 137.210302][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0 [ 137.211866][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.213874][ T4901] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 137.215333][ T4901] pc : sysfs_remove_group+0x174/0x288 [ 137.216376][ T4901] lr : sysfs_remove_group+0x174/0x288 [ 137.217408][ T4901] sp : ffff800020ad7830 [ 137.218202][ T4901] x29: ffff800020ad7830 x28: 1fffe0001b29a0bb x27: 0000000000000000 [ 137.219754][ T4901] x26: 0000000000000000 x25: 1fffe0001b29a088 x24: 1ffff000026d8f14 [ 137.221327][ T4901] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cf9be418 [ 137.222898][ T4901] x20: ffff0000e5a29570 x19: ffff8000136c7f80 x18: 0000000000000001 [ 137.224481][ T4901] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff [ 137.225978][ T4901] x14: ffff0000cec91b40 x13: 0000000000000001 x12: 0000000000000001 [ 137.227459][ T4901] x11: 0000000000000000 x10: 0000000000000000 x9 : 9eff12e9d1ec3400 [ 137.229052][ T4901] x8 : 9eff12e9d1ec3400 x7 : 0000000000000001 x6 : 0000000000000001 [ 137.230835][ T4901] x5 : ffff800020ad6f98 x4 : ffff800014c405e0 x3 : ffff800008555e80 [ 137.232514][ T4901] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c [ 137.234041][ T4901] Call trace: [ 137.234655][ T4901] sysfs_remove_group+0x174/0x288 [ 137.235589][ T4901] netdev_queue_update_kobjects+0x388/0x404 [ 137.236681][ T4901] netdev_unregister_kobject+0x100/0x204 [ 137.237763][ T4901] unregister_netdevice_many+0x12c8/0x189c [ 137.238870][ T4901] unregister_netdev+0x178/0x1f0 [ 137.239793][ T4901] bnep_session+0x2274/0x2424 [ 137.240683][ T4901] kthread+0x37c/0x45c [ 137.241469][ T4901] ret_from_fork+0x10/0x20 [ 137.242324][ T4901] irq event stamp: 7140 [ 137.243188][ T4901] hardirqs last enabled at (7139): [] __up_console_sem+0xb4/0x100 [ 137.245046][ T4901] hardirqs last disabled at (7140): [] el1_dbg+0x24/0x80 [ 137.246750][ T4901] softirqs last enabled at (7128): [] handle_softirqs+0xb88/0xdbc [ 137.248710][ T4901] softirqs last disabled at (7113): [] __irq_exit_rcu+0x268/0x4d8 [ 137.250583][ T4901] ---[ end trace 1f5870071ce02957 ]--- [ 137.260624][ T4901] ================================================================== [ 137.262529][ T4901] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 137.264037][ T4901] Read of size 8 at addr ffff0000db3d1388 by task kbnepd bnep0/4901 [ 137.265643][ T4901] [ 137.266117][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G W 5.15.173-syzkaller #0 [ 137.267958][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.270289][ T4901] Call trace: [ 137.271003][ T4901] dump_backtrace+0x0/0x530 [ 137.271863][ T4901] show_stack+0x2c/0x3c [ 137.272695][ T4901] dump_stack_lvl+0x108/0x170 [ 137.273621][ T4901] print_address_description+0x7c/0x3f0 [ 137.274654][ T4901] kasan_report+0x174/0x1e4 [ 137.275529][ T4901] __asan_report_load8_noabort+0x44/0x50 [ 137.276630][ T4901] device_for_each_child+0xa8/0x174 [ 137.277666][ T4901] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 137.278909][ T4901] netdev_unregister_kobject+0x144/0x204 [ 137.280091][ T4901] unregister_netdevice_many+0x12c8/0x189c [ 137.281271][ T4901] unregister_netdev+0x178/0x1f0 [ 137.282261][ T4901] bnep_session+0x2274/0x2424 [ 137.283102][ T4901] kthread+0x37c/0x45c [ 137.283952][ T4901] ret_from_fork+0x10/0x20 [ 137.284870][ T4901] [ 137.285321][ T4901] Allocated by task 4479: [ 137.286184][ T4901] ____kasan_kmalloc+0xbc/0xfc [ 137.287204][ T4901] __kasan_kmalloc+0x10/0x1c [ 137.288117][ T4901] __kmalloc+0x29c/0x4c8 [ 137.289000][ T4901] hci_alloc_dev_priv+0x30/0x18b0 [ 137.289973][ T4901] vhci_create_device+0xf8/0x568 [ 137.290888][ T4901] vhci_write+0x318/0x3b8 [ 137.291711][ T4901] vfs_write+0x884/0xb44 [ 137.292498][ T4901] ksys_write+0x15c/0x26c [ 137.293379][ T4901] __arm64_sys_write+0x7c/0x90 [ 137.294449][ T4901] invoke_syscall+0x98/0x2b8 [ 137.295396][ T4901] el0_svc_common+0x138/0x258 [ 137.296324][ T4901] do_el0_svc+0x58/0x14c [ 137.297128][ T4901] el0_svc+0x7c/0x1f0 [ 137.298042][ T4901] el0t_64_sync_handler+0x84/0xe4 [ 137.299107][ T4901] el0t_64_sync+0x1a0/0x1a4 [ 137.299961][ T4901] [ 137.300432][ T4901] Freed by task 4479: [ 137.301148][ T4901] kasan_set_track+0x4c/0x84 [ 137.302014][ T4901] kasan_set_free_info+0x28/0x4c [ 137.302997][ T4901] ____kasan_slab_free+0x118/0x164 [ 137.304046][ T4901] __kasan_slab_free+0x18/0x28 [ 137.304978][ T4901] slab_free_freelist_hook+0x128/0x1ec [ 137.305983][ T4901] kfree+0x178/0x410 [ 137.306727][ T4901] hci_release_dev+0x1004/0x116c [ 137.307789][ T4901] bt_host_release+0x70/0x88 [ 137.308727][ T4901] device_release+0x8c/0x1ac [ 137.309645][ T4901] kobject_put+0x2c4/0x438 [ 137.310623][ T4901] put_device+0x28/0x40 [ 137.311420][ T4901] hci_free_dev+0x24/0x34 [ 137.312272][ T4901] vhci_release+0x7c/0xc4 [ 137.313143][ T4901] __fput+0x1c4/0x800 [ 137.313908][ T4901] ____fput+0x20/0x30 [ 137.314695][ T4901] task_work_run+0x130/0x1e4 [ 137.315525][ T4901] do_exit+0x670/0x20bc [ 137.316337][ T4901] do_group_exit+0x110/0x268 [ 137.317253][ T4901] __wake_up_parent+0x0/0x60 [ 137.318187][ T4901] invoke_syscall+0x98/0x2b8 [ 137.319172][ T4901] el0_svc_common+0x138/0x258 [ 137.320229][ T4901] do_el0_svc+0x58/0x14c [ 137.321106][ T4901] el0_svc+0x7c/0x1f0 [ 137.321888][ T4901] el0t_64_sync_handler+0x84/0xe4 [ 137.323002][ T4901] el0t_64_sync+0x1a0/0x1a4 [ 137.323961][ T4901] [ 137.324451][ T4901] Last potentially related work creation: [ 137.325759][ T4901] kasan_save_stack+0x38/0x68 [ 137.326654][ T4901] kasan_record_aux_stack+0xd4/0x11c [ 137.327662][ T4901] insert_work+0x64/0x394 [ 137.328557][ T4901] __queue_work+0xb84/0x114c [ 137.329542][ T4901] queue_work_on+0xc4/0x17c [ 137.330457][ T4901] hci_send_acl+0x7a8/0xaa4 [ 137.331314][ T4901] l2cap_do_send+0x238/0x350 [ 137.332167][ T4901] l2cap_chan_send+0x190c/0x1e5c [ 137.333173][ T4901] l2cap_sock_sendmsg+0x184/0x2a8 [ 137.334290][ T4901] kernel_sendmsg+0x1c8/0x2a0 [ 137.335215][ T4901] bnep_session+0x1e38/0x2424 [ 137.336201][ T4901] kthread+0x37c/0x45c [ 137.337055][ T4901] ret_from_fork+0x10/0x20 [ 137.337924][ T4901] [ 137.338394][ T4901] Second to last potentially related work creation: [ 137.339710][ T4901] kasan_save_stack+0x38/0x68 [ 137.340676][ T4901] kasan_record_aux_stack+0xd4/0x11c [ 137.341673][ T4901] insert_work+0x64/0x394 [ 137.342481][ T4901] __queue_work+0xb84/0x114c [ 137.343379][ T4901] queue_work_on+0xc4/0x17c [ 137.344327][ T4901] hci_send_acl+0x7a8/0xaa4 [ 137.345175][ T4901] l2cap_do_send+0x238/0x350 [ 137.346199][ T4901] l2cap_chan_send+0x190c/0x1e5c [ 137.347291][ T4901] l2cap_sock_sendmsg+0x184/0x2a8 [ 137.348212][ T4901] kernel_sendmsg+0x1c8/0x2a0 [ 137.349095][ T4901] bnep_session+0x1e38/0x2424 [ 137.350036][ T4901] kthread+0x37c/0x45c [ 137.350836][ T4901] ret_from_fork+0x10/0x20 [ 137.351621][ T4901] [ 137.352067][ T4901] The buggy address belongs to the object at ffff0000db3d0000 [ 137.352067][ T4901] which belongs to the cache kmalloc-8k of size 8192 [ 137.354801][ T4901] The buggy address is located 5000 bytes inside of [ 137.354801][ T4901] 8192-byte region [ffff0000db3d0000, ffff0000db3d2000) [ 137.357339][ T4901] The buggy address belongs to the page: [ 137.358402][ T4901] page:00000000a5d7b782 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b3d0 [ 137.360361][ T4901] head:00000000a5d7b782 order:3 compound_mapcount:0 compound_pincount:0 [ 137.361893][ T4901] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 137.363369][ T4901] raw: 05ffc00000010200 0000000000000000 0000000100000001 ffff0000c0002c00 [ 137.365062][ T4901] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 137.366772][ T4901] page dumped because: kasan: bad access detected [ 137.367995][ T4901] [ 137.368410][ T4901] Memory state around the buggy address: [ 137.369526][ T4901] ffff0000db3d1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.371066][ T4901] ffff0000db3d1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.372615][ T4901] >ffff0000db3d1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.374139][ T4901] ^ [ 137.374925][ T4901] ffff0000db3d1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.376488][ T4901] ffff0000db3d1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.378070][ T4901] ================================================================== [ 137.379616][ T4901] Disabling lock debugging due to kernel taint [ 137.382989][ T4901] ================================================================================ [ 137.384765][ T4901] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 137.386277][ T4901] index 14089 is out of range for type 'unsigned long[8]' [ 137.387643][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 137.389435][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.391262][ T4901] Call trace: [ 137.391847][ T4901] dump_backtrace+0x0/0x530 [ 137.392713][ T4901] show_stack+0x2c/0x3c [ 137.393493][ T4901] dump_stack_lvl+0x108/0x170 [ 137.394421][ T4901] dump_stack+0x1c/0x58 [ 137.395151][ T4901] __ubsan_handle_out_of_bounds+0x108/0x15c [ 137.396255][ T4901] queued_spin_lock_slowpath+0x854/0x938 [ 137.397283][ T4901] do_raw_spin_lock+0x334/0x35c [ 137.398226][ T4901] _raw_spin_lock_irqsave+0xcc/0x14c [ 137.399215][ T4901] klist_next+0x8c/0x2f4 [ 137.400064][ T4901] device_for_each_child+0xc0/0x174 [ 137.401053][ T4901] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 137.402170][ T4901] netdev_unregister_kobject+0x144/0x204 [ 137.403184][ T4901] unregister_netdevice_many+0x12c8/0x189c [ 137.404310][ T4901] unregister_netdev+0x178/0x1f0 [ 137.405270][ T4901] bnep_session+0x2274/0x2424 [ 137.406138][ T4901] kthread+0x37c/0x45c [ 137.406911][ T4901] ret_from_fork+0x10/0x20 [ 137.407744][ T4901] ================================================================================ [ 137.409483][ T4901] Unable to handle kernel paging request at virtual address ffff800014ac7753 [ 137.411137][ T4901] Mem abort info: [ 137.411852][ T4901] ESR = 0x0000000096000047 [ 137.412664][ T4901] EC = 0x25: DABT (current EL), IL = 32 bits [ 137.413920][ T4901] SET = 0, FnV = 0 [ 137.414655][ T4901] EA = 0, S1PTW = 0 [ 137.415400][ T4901] FSC = 0x07: level 3 translation fault [ 137.416423][ T4901] Data abort info: [ 137.417108][ T4901] ISV = 0, ISS = 0x00000047 [ 137.417963][ T4901] CM = 0, WnR = 1 [ 137.418745][ T4901] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ae184000 [ 137.420206][ T4901] [ffff800014ac7753] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000 [ 137.422782][ T4901] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 137.424065][ T4901] Modules linked in: [ 137.424827][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G B W 5.15.173-syzkaller #0 [ 137.426672][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.428518][ T4901] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 137.429959][ T4901] pc : queued_spin_lock_slowpath+0x36c/0x938 [ 137.431101][ T4901] lr : queued_spin_lock_slowpath+0x854/0x938 [ 137.432182][ T4901] sp : ffff800020ad7580 [ 137.433028][ T4901] x29: ffff800020ad7620 x28: 1ffff0000415aebc x27: 0000000000000000 [ 137.434501][ T4901] x26: dfff800000000000 x25: ffff70000415aeb4 x24: 0000000000040000 [ 137.436117][ T4901] x23: ffff800014ac7753 x22: ffff0001b418b708 x21: ffff0001b418b700 [ 137.437665][ T4901] x20: ffff800014ac7730 x19: ffff0000e7546800 x18: 0000000000000002 [ 137.439205][ T4901] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff [ 137.440811][ T4901] x14: ffff0000cec91b40 x13: 0000000000000001 x12: ffff700002e38164 [ 137.442304][ T4901] x11: 0000000000000001 x10: ffff800014ac7700 x9 : 0000000000000003 [ 137.443797][ T4901] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 137.445531][ T4901] x5 : ffff800020ad6c78 x4 : ffff800014c405e0 x3 : ffff80000819c3ec [ 137.447117][ T4901] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b418b708 [ 137.448586][ T4901] Call trace: [ 137.449178][ T4901] queued_spin_lock_slowpath+0x36c/0x938 [ 137.450246][ T4901] do_raw_spin_lock+0x334/0x35c [ 137.451131][ T4901] _raw_spin_lock_irqsave+0xcc/0x14c [ 137.452138][ T4901] klist_next+0x8c/0x2f4 [ 137.452990][ T4901] device_for_each_child+0xc0/0x174 [ 137.453973][ T4901] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 137.455116][ T4901] netdev_unregister_kobject+0x144/0x204 [ 137.456302][ T4901] unregister_netdevice_many+0x12c8/0x189c [ 137.457519][ T4901] unregister_netdev+0x178/0x1f0 [ 137.458497][ T4901] bnep_session+0x2274/0x2424 [ 137.459357][ T4901] kthread+0x37c/0x45c [ 137.460102][ T4901] ret_from_fork+0x10/0x20 [ 137.461009][ T4901] Code: aa1703e0 9417451d aa1603e0 52800081 (f90002f5) [ 137.462407][ T4901] ---[ end trace 1f5870071ce02958 ]--- [ 137.905959][ T4901] Kernel panic - not syncing: Oops: Fatal exception [ 137.907416][ T4901] SMP: stopping secondary CPUs [ 137.908360][ T4901] Kernel Offset: disabled [ 137.909212][ T4901] CPU features: 0x8,000081c1,21302e40 [ 137.910218][ T4901] Memory Limit: none [ 138.367423][ T4901] Rebooting in 86400 seconds..