last executing test programs: 3.020010334s ago: executing program 3 (id=568): syz_open_dev$evdev(0x0, 0xe949, 0x593241) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_gettime(0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f}, 0x50) 2.698897464s ago: executing program 2 (id=573): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r3, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 2.282546778s ago: executing program 0 (id=582): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) 2.245378899s ago: executing program 0 (id=583): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x2) 2.185007801s ago: executing program 0 (id=585): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0408"], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24008885}, 0x40885) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x1}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9b05b005700010001fc020009000d030800fbffff030f000f000c08050003000600020f0804000900004dff01020800010203000501010501010c08050000000100010e100321da00e51000040004000400d747f0b6773570b48e462b676c73b31b286ef2f52b1f7f"], 0x60) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.147326352s ago: executing program 2 (id=587): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r1, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2.088491554s ago: executing program 2 (id=588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="8c3f", 0x2, 0x4008050, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 1.91196817s ago: executing program 2 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo={0x8, 0x0, 0x0, 0x5, 0x3}}}}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.91177671s ago: executing program 4 (id=592): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"}}}, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.828577072s ago: executing program 2 (id=593): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) 1.800137553s ago: executing program 4 (id=594): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0503feffffff000000000700000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x20044000) 1.779770444s ago: executing program 2 (id=595): syz_usb_connect(0x0, 0x371, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 1.659861208s ago: executing program 4 (id=598): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r3, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 1.643509958s ago: executing program 0 (id=599): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.5810322s ago: executing program 0 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.513675352s ago: executing program 3 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="44c24d", 0x3}], 0x1}, 0x8810) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40018002, 0x0) 1.513379302s ago: executing program 3 (id=603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0) 1.468097293s ago: executing program 3 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo={0x8, 0x0, 0x0, 0x5, 0x3}}}}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.460566334s ago: executing program 0 (id=606): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b00010000030009"], 0x0) syz_usb_disconnect(r0) 1.458065004s ago: executing program 3 (id=607): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) 1.429692015s ago: executing program 3 (id=608): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.108997915s ago: executing program 4 (id=611): syz_open_dev$evdev(0x0, 0xe949, 0x593241) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_gettime(0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f}, 0x50) 404.117308ms ago: executing program 1 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0) 388.427688ms ago: executing program 1 (id=615): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000400)=""/42, &(0x7f0000000580)=0x2a) 311.30778ms ago: executing program 1 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 176.013005ms ago: executing program 1 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 70.058958ms ago: executing program 4 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo={0x8, 0x0, 0x0, 0x5, 0x3}}}}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 50.115618ms ago: executing program 1 (id=619): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) 20.02094ms ago: executing program 4 (id=620): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3ef, 0x10000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 1 (id=621): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007080)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff3}, {}, {0x5, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xfff3}}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x48000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 29.010874][ T4313] cgroup: Unknown subsys name 'net' [ 29.265556][ T4313] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.519667][ T4313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.704941][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.710883][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.714539][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.715818][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.717816][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.719032][ T4339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.720225][ T4339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.721272][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.722379][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.724250][ T4339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.725444][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.726545][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.727906][ T4339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.729254][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.730600][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.731110][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.732054][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.733194][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.734593][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.734954][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.737139][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.740270][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.743008][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.746189][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.747803][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.775976][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.777554][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.781664][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.790507][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.791718][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.866108][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.893894][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.895818][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.914415][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.915619][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.916870][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.927324][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.928435][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.929832][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.944584][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.971632][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.972864][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.974214][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.977057][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.980266][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.982152][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983597][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.985059][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.988997][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.993007][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.994107][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.995676][ T4325] device bridge_slave_1 entered promiscuous mode [ 31.007161][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.008189][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.009641][ T4338] device bridge_slave_0 entered promiscuous mode [ 31.011490][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.012878][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.014248][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.018448][ T4333] team0: Port device team_slave_0 added [ 31.020053][ T4333] team0: Port device team_slave_1 added [ 31.026253][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.027320][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.028613][ T4338] device bridge_slave_1 entered promiscuous mode [ 31.046088][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.049963][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.054593][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.056955][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.058550][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.059532][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.063403][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.065754][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.066750][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.070370][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.075802][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.076826][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.078190][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.080404][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.084499][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.090137][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.091337][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.093483][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.100622][ T4326] team0: Port device team_slave_0 added [ 31.102432][ T4325] team0: Port device team_slave_0 added [ 31.111596][ T4326] team0: Port device team_slave_1 added [ 31.115029][ T4325] team0: Port device team_slave_1 added [ 31.116845][ T4338] team0: Port device team_slave_0 added [ 31.123680][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.124726][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.128443][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.130453][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.131388][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.135335][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.139928][ T4338] team0: Port device team_slave_1 added [ 31.163650][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.202669][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.246548][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.259823][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.261490][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.262473][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.266066][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.274362][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.275438][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.278874][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.280948][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.281913][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.285733][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.295207][ T4330] team0: Port device team_slave_0 added [ 31.296459][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.297494][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.300962][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.353559][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.392655][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.442650][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.443797][ T4326] Cannot create hsr debugfs directory [ 31.445385][ T4330] team0: Port device team_slave_1 added [ 31.457638][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.458734][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.462408][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.523634][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.562650][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.602606][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.603740][ T4325] Cannot create hsr debugfs directory [ 31.606352][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.607342][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.610826][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.663690][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.702739][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.752573][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.753751][ T4338] Cannot create hsr debugfs directory [ 31.813758][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.864947][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.902569][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.903768][ T4330] Cannot create hsr debugfs directory [ 31.966121][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.012099][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.053889][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.096624][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.143841][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.173616][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.216382][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.243769][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.301407][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.357404][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.405742][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.446602][ T4338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.483645][ T4338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.545279][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.592545][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.644143][ T4338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.683697][ T4338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.728621][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.763808][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.806645][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.810780][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.812701][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 32.812829][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 32.813627][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 32.814504][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.815370][ T4342] Bluetooth: hci0: command 0x0409 tx timeout [ 32.860251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.862093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.864424][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.874654][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.880864][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.882473][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.884787][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.885815][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.893854][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.895250][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.896708][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.898320][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.899414][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.906953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.908191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.909630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.918306][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.924288][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.929243][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.933588][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.937891][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.939472][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.940623][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.941821][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.944743][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.946134][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.947117][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.948299][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.953706][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.955378][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.956787][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.958901][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.960471][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.961443][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.963391][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.965359][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.966904][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.967913][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.969156][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.970474][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.978998][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.980496][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.988654][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.990006][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.991340][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.993117][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.994587][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.995967][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.997740][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.999239][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.000575][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.001957][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.003985][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.005009][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.006300][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.007735][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.009154][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.010552][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.011956][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.013893][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.016251][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.019062][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.028508][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.030091][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.031428][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.033389][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.034747][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.035723][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.038501][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.039897][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.041319][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.055230][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.057125][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.058763][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.060209][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.061529][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.062553][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.067103][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.068741][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.076571][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.078361][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.079853][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.081387][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.085741][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.087230][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.088715][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.090214][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.093553][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.100312][ T4338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.101773][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.107234][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.108650][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.110210][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.111881][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.114135][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.115570][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.117021][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.118464][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.119783][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.121180][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.123059][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.124470][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.126548][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.128888][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.136162][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.145654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.147106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.148477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.149771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.151040][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.152111][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.158350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.159894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.163182][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.164201][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.165486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.166992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.168545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.170132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.171589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.176554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.179905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.181035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.187387][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.191546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.195886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.197576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.204242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.205828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.207254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.214835][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.232952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.234434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.243730][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.245229][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.246985][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.248310][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.250519][ T4333] device veth0_vlan entered promiscuous mode [ 33.265257][ T4333] device veth1_vlan entered promiscuous mode [ 33.279099][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.280538][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.281941][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.283441][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.297624][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.298785][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.307781][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.310293][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.311342][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.316075][ T4333] device veth0_macvtap entered promiscuous mode [ 33.318865][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.320407][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.321850][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.324688][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.328052][ T4333] device veth1_macvtap entered promiscuous mode [ 33.336788][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.338062][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.339459][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.340534][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.345370][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.355536][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.358852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.360390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.369935][ T4325] device veth0_vlan entered promiscuous mode [ 33.378448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.379988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.381414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.384095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.385530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.386958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.388380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.389717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.392080][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.397315][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.398599][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399877][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401075][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.405883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.407234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.408417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.409810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.422989][ T4325] device veth1_vlan entered promiscuous mode [ 33.427289][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.428771][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.430228][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.431589][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.433473][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.434999][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.436458][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.437753][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.439011][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.441201][ T4338] device veth0_vlan entered promiscuous mode [ 33.445945][ T4326] device veth0_vlan entered promiscuous mode [ 33.458887][ T4326] device veth1_vlan entered promiscuous mode [ 33.461222][ T4338] device veth1_vlan entered promiscuous mode [ 33.491056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.493154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.494496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.495838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.497119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.498400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.499795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.501084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.502441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.506747][ T4325] device veth0_macvtap entered promiscuous mode [ 33.511838][ T4325] device veth1_macvtap entered promiscuous mode [ 33.520944][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.522234][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.524951][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.526486][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.529808][ T4330] device veth0_vlan entered promiscuous mode [ 33.533628][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.535064][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.536495][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.537737][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.540177][ T4326] device veth0_macvtap entered promiscuous mode [ 33.545908][ T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.547101][ T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.554496][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.555970][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.557198][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.558561][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.560084][ T4326] device veth1_macvtap entered promiscuous mode [ 33.562050][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.565767][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.567642][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.569178][ T4330] device veth1_vlan entered promiscuous mode [ 33.575144][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.576465][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.577737][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.578984][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.580260][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.582303][ T4338] device veth0_macvtap entered promiscuous mode [ 33.589077][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.590576][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.593523][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.595385][ T4338] device veth1_macvtap entered promiscuous mode [ 33.599208][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.600661][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.602275][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.604990][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.607402][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.608790][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.610134][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611387][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.616178][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.617287][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.620854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.625066][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.626556][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.627899][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.629374][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.631499][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.635411][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.636948][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.638389][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.639793][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.641135][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.646852][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.648868][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.650084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.651508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.653899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.655310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.663200][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.664800][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.666232][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.667669][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.673608][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.679426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.680932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.682266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.684365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.687605][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.689077][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.690435][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.691848][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.693899][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.695424][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.697328][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.699654][ T4330] device veth0_macvtap entered promiscuous mode [ 33.707167][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.708479][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.709868][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.713794][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.714972][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.716248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.724088][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725325][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.726582][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.727837][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.732086][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.734024][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.735267][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.736491][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.741958][ T4330] device veth1_macvtap entered promiscuous mode [ 33.747096][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.748656][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.750062][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.751512][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.754090][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.755699][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.757041][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.758508][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.760755][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.769306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.770631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.772151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.796529][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.797651][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.798935][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.837080][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.839065][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.840644][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.842060][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.846501][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.848010][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.849360][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.850905][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.854166][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.857313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.859184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.879079][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.880283][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.881493][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.888616][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.890109][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.891298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.895031][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.896324][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.898430][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.899605][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.926041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.927260][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.928076][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.929500][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.931956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.934339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.987611][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.990909][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.991870][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.992144][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.995677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.996860][ T4419] infiniband syz1: set active [ 33.998004][ T4419] infiniband syz1: added syz_tun [ 34.020672][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.021885][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.023107][ T4419] RDS/IB: syz1: added [ 34.023730][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.023933][ T4419] smc: adding ib device syz1 with port count 1 [ 34.025763][ T4419] smc: ib device syz1 port 1 has pnetid [ 34.148286][ T4429] loop1: detected capacity change from 0 to 32768 [ 34.149658][ T4429] ======================================================= [ 34.149658][ T4429] WARNING: The mand mount option has been deprecated and [ 34.149658][ T4429] and is ignored by this kernel. Remove the mand [ 34.149658][ T4429] option from the mount to silence this warning. [ 34.149658][ T4429] ======================================================= [ 34.170430][ T4429] XFS (loop1): Mounting V5 Filesystem [ 34.213561][ T4429] XFS (loop1): Ending clean mount [ 34.256504][ T4427] loop2: detected capacity change from 0 to 32768 [ 34.268003][ T4427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4427) [ 34.270511][ T4429] XFS (loop1): Quotacheck needed: Please wait. [ 34.283959][ T4423] infiniband syz1: set down [ 34.310844][ T4427] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 34.312648][ T4427] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 34.314188][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.315715][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.317784][ T4427] BTRFS info (device loop2): using free space tree [ 34.325778][ T4429] XFS (loop1): Quotacheck: Done. [ 34.362604][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.369130][ T4429] XFS (loop1): User initiated shutdown received. [ 34.373770][ T4429] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x80/0x15c (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 34.378173][ T4429] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 34.485671][ T4427] BTRFS info (device loop2): enabling ssd optimizations [ 34.564855][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 34.567863][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.571428][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 34.579917][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 34.581175][ T14] usb 1-1: Product: syz [ 34.581832][ T14] usb 1-1: Manufacturer: syz [ 34.588363][ T14] usb 1-1: SerialNumber: syz [ 34.602315][ T14] usb 1-1: config 0 descriptor?? [ 34.607359][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 34.608288][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 34.772408][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.803625][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.893037][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 34.893961][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 34.894891][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 34.895795][ T4329] Bluetooth: hci4: command 0x041b tx timeout [ 34.896671][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 34.916093][ T4429] syz.1.2 (4429): drop_caches: 2 [ 34.984036][ T14] usb 1-1: USB disconnect, device number 2 [ 35.029264][ T4338] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.182407][ T4423] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.183942][ T4423] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.185328][ T4423] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.186713][ T4423] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.360281][ T4479] loop2: detected capacity change from 0 to 32768 [ 35.368658][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (4479) [ 35.392363][ T4479] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 35.397731][ T4479] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 35.400340][ T4479] BTRFS info (device loop2): enabling disk space caching [ 35.402871][ T4479] BTRFS info (device loop2): force clearing of disk cache [ 35.403844][ T4479] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 35.405199][ T4479] BTRFS info (device loop2): use zstd compression, level 3 [ 35.406089][ T4479] BTRFS info (device loop2): disk space caching is enabled [ 35.437723][ T4479] BTRFS info (device loop2): enabling ssd optimizations [ 35.439286][ T4479] BTRFS info (device loop2): rebuilding free space tree [ 35.447606][ T4479] BTRFS info (device loop2): disabling free space tree [ 35.448852][ T4479] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 35.450249][ T4479] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 35.466086][ T4326] XFS (loop1): Unmounting Filesystem [ 35.595941][ T4338] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 36.617095][ T4517] loop0: detected capacity change from 0 to 2048 [ 36.641688][ T4517] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 36.736748][ T4514] loop2: detected capacity change from 0 to 32768 [ 36.748460][ T4514] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (4514) [ 36.804782][ T4514] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 36.806293][ T4514] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 36.807633][ T4514] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 36.808911][ T4514] BTRFS info (device loop2): use zstd compression, level 3 [ 36.809865][ T4514] BTRFS info (device loop2): using free space tree [ 36.923173][ T4466] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 36.967374][ T4514] BTRFS info (device loop2): enabling ssd optimizations [ 36.982768][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 36.983747][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 36.984565][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 36.985376][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 36.986276][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 37.074480][ T4466] usb 1-1: device descriptor read/64, error -71 [ 37.342981][ T4466] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 37.496389][ T4466] usb 1-1: device descriptor read/64, error -71 [ 37.507706][ T4338] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 37.614588][ T4466] usb usb1-port1: attempt power cycle [ 37.643741][ T4560] fuse: Unknown parameter 'user_id00000000000000000000' [ 37.847124][ T4568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.022547][ T4466] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 38.055101][ T4466] usb 1-1: device descriptor read/8, error -71 [ 38.291406][ T4575] device syzkaller1 entered promiscuous mode [ 38.323103][ T4466] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.354833][ T4466] usb 1-1: device descriptor read/8, error -71 [ 38.472685][ T4466] usb usb1-port1: unable to enumerate USB device [ 38.570521][ T4583] mmap: syz.2.30 (4583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.113029][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 39.114238][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 39.115588][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 39.117010][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 39.118446][ T4329] Bluetooth: hci1: command 0x0419 tx timeout [ 39.591404][ T4589] loop2: detected capacity change from 0 to 4096 [ 39.670461][ T4589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.699582][ T4592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.33'. [ 39.744621][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 39.814774][ T4595] loop3: detected capacity change from 0 to 32768 [ 39.817266][ T4587] loop4: detected capacity change from 0 to 32768 [ 39.820779][ T4595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.34 (4595) [ 39.836535][ T4595] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.838171][ T4595] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 39.839686][ T4595] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 39.841189][ T4595] BTRFS info (device loop3): trying to use backup root at mount time [ 39.842315][ T4595] BTRFS info (device loop3): setting nodatasum [ 39.843114][ T4587] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.31 (4587) [ 39.852565][ T4595] BTRFS info (device loop3): enabling ssd optimizations [ 39.853777][ T4595] BTRFS info (device loop3): using spread ssd allocation scheme [ 39.854892][ T4595] BTRFS info (device loop3): force zlib compression, level 3 [ 39.855998][ T4595] BTRFS info (device loop3): allowing degraded mounts [ 39.857073][ T4595] BTRFS info (device loop3): turning on flush-on-commit [ 39.858068][ T4595] BTRFS info (device loop3): setting nodatacow [ 39.858896][ T4595] BTRFS info (device loop3): using free space tree [ 39.885569][ T4317] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.012465][ T4599] loop2: detected capacity change from 0 to 32768 [ 40.048017][ T4325] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.057308][ T4599] XFS (loop2): Mounting V5 Filesystem [ 40.113853][ T4599] XFS (loop2): Ending clean mount [ 40.122638][ T4377] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.179273][ T4338] XFS (loop2): Unmounting Filesystem [ 40.335858][ T4377] usb 1-1: Using ep0 maxpacket: 32 [ 40.347104][ T4377] usb 1-1: config 0 has no interfaces? [ 40.356254][ T4377] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 40.357557][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.359211][ T4377] usb 1-1: Product: syz [ 40.359850][ T4377] usb 1-1: Manufacturer: syz [ 40.360476][ T4377] usb 1-1: SerialNumber: syz [ 40.362703][ T4377] usb 1-1: config 0 descriptor?? [ 40.820678][ T4651] loop2: detected capacity change from 0 to 8192 [ 40.831193][ T4653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 40.845979][ T4651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.964543][ T4342] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 41.027843][ T4634] loop3: detected capacity change from 0 to 131072 [ 41.045692][ T4634] F2FS-fs (loop3): invalid crc value [ 41.065849][ T4634] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.087044][ T4634] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 41.094682][ T4634] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 41.199339][ T4663] fuse: Unknown parameter 'user_id00000000000000000000' [ 43.060059][ T4601] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 43.140331][ T112] usb 1-1: USB disconnect, device number 7 [ 43.181744][ T3991] device veth1_vlan left promiscuous mode [ 43.184434][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.325004][ T4693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.55'. [ 44.239237][ T4706] device syzkaller1 entered promiscuous mode [ 44.840032][ T4728] fuse: Unknown parameter 'user_id00000000000000000000' [ 44.846139][ T4727] loop1: detected capacity change from 0 to 2048 [ 44.853081][ T4727] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 44.858686][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.860899][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.202015][ T4745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.365401][ T4741] loop0: detected capacity change from 0 to 32768 [ 46.406592][ T4741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (4741) [ 46.427905][ T4741] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.429732][ T4741] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 46.441455][ T4741] BTRFS info (device loop0): enabling auto defrag [ 46.450842][ T4741] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 46.452416][ T4741] BTRFS info (device loop0): use zstd compression, level 3 [ 46.467599][ T4741] BTRFS info (device loop0): turning on async discard [ 46.472055][ T4741] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 46.477705][ T4741] BTRFS info (device loop0): trying to use backup root at mount time [ 46.500014][ T4741] BTRFS info (device loop0): setting nodatacow, compression disabled [ 46.511080][ T4741] BTRFS info (device loop0): enabling ssd optimizations [ 46.517809][ T4741] BTRFS info (device loop0): using spread ssd allocation scheme [ 46.518825][ T4741] BTRFS info (device loop0): using free space tree [ 46.802034][ T4395] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 46.806880][ T4741] BTRFS error (device loop0): failed to load root extent [ 46.807976][ T4741] BTRFS warning (device loop0): try to load backup roots slot 1 [ 46.810010][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 46.811982][ T4741] BTRFS warning (device loop0): couldn't read tree root [ 46.814342][ T4741] BTRFS warning (device loop0): try to load backup roots slot 2 [ 46.815723][ T4741] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 46.825292][ T4741] BTRFS warning (device loop0): couldn't read tree root [ 46.833602][ T4741] BTRFS warning (device loop0): try to load backup roots slot 3 [ 46.873369][ T4741] BTRFS info (device loop0): rebuilding free space tree [ 46.877994][ T4741] BTRFS info (device loop0): checking UUID tree [ 47.065668][ T4333] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.794865][ T4783] device syzkaller1 entered promiscuous mode [ 47.945442][ T4785] fuse: Bad value for 'fd' [ 48.608498][ T4798] loop2: detected capacity change from 0 to 2048 [ 48.630316][ T4798] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 48.640785][ T4798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.646336][ T4798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.828769][ T4815] device syzkaller1 entered promiscuous mode [ 49.920449][ T4817] fuse: Bad value for 'fd' [ 49.926592][ T4807] loop0: detected capacity change from 0 to 32768 [ 49.931928][ T4807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.81 (4807) [ 49.937302][ T4807] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.939233][ T4807] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 49.940661][ T4807] BTRFS info (device loop0): enabling auto defrag [ 49.941529][ T4807] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 49.945284][ T4807] BTRFS info (device loop0): use zstd compression, level 3 [ 49.946447][ T4807] BTRFS info (device loop0): turning on async discard [ 49.947580][ T4807] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 49.949161][ T4807] BTRFS info (device loop0): trying to use backup root at mount time [ 49.950917][ T4807] BTRFS info (device loop0): setting nodatacow, compression disabled [ 49.952409][ T4807] BTRFS info (device loop0): enabling ssd optimizations [ 49.959770][ T4807] BTRFS info (device loop0): using spread ssd allocation scheme [ 49.961328][ T4807] BTRFS info (device loop0): using free space tree [ 49.975261][ T4393] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 49.977335][ T4807] BTRFS error (device loop0): failed to load root extent [ 49.978483][ T4807] BTRFS warning (device loop0): try to load backup roots slot 1 [ 49.979708][ T4572] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 49.981627][ T4807] BTRFS warning (device loop0): couldn't read tree root [ 49.982928][ T4807] BTRFS warning (device loop0): try to load backup roots slot 2 [ 49.985267][ T4807] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 49.987144][ T4807] BTRFS warning (device loop0): couldn't read tree root [ 49.988192][ T4807] BTRFS warning (device loop0): try to load backup roots slot 3 [ 50.001259][ T4807] BTRFS info (device loop0): rebuilding free space tree [ 50.009862][ T4807] BTRFS info (device loop0): checking UUID tree [ 50.117820][ T4333] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.718368][ T4847] loop0: detected capacity change from 0 to 32768 [ 50.727720][ T4847] (syz.0.91,4847,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 50.736487][ T4847] (syz.0.91,4847,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 50.770523][ T4847] JBD2: Ignoring recovery information on journal [ 50.798314][ T4847] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 50.826250][ T4847] (syz.0.91,4847,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 50.876197][ T4333] ocfs2: Unmounting device (7,0) on (node local) [ 50.910913][ T4860] loop0: detected capacity change from 0 to 2048 [ 50.922464][ T4860] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 51.137351][ T4863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.94'. [ 51.255031][ T4474] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 52.142190][ T4876] device syzkaller1 entered promiscuous mode [ 52.237585][ T4878] fuse: Bad value for 'fd' [ 52.397043][ T4474] usb 1-1: device descriptor read/64, error -71 [ 52.487167][ T4883] loop4: detected capacity change from 0 to 32768 [ 52.496545][ T4883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.102 (4883) [ 52.508681][ T4883] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.510222][ T4883] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 52.511488][ T4883] BTRFS info (device loop4): enabling auto defrag [ 52.513414][ T4883] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 52.515355][ T4883] BTRFS info (device loop4): use zstd compression, level 3 [ 52.518229][ T4883] BTRFS info (device loop4): turning on async discard [ 52.519189][ T4883] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 52.523395][ T4883] BTRFS info (device loop4): trying to use backup root at mount time [ 52.524584][ T4883] BTRFS info (device loop4): setting nodatacow, compression disabled [ 52.525647][ T4883] BTRFS info (device loop4): enabling ssd optimizations [ 52.533093][ T4883] BTRFS info (device loop4): using spread ssd allocation scheme [ 52.534266][ T4883] BTRFS info (device loop4): using free space tree [ 52.694860][ T4578] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 52.696844][ T4883] BTRFS error (device loop4): failed to load root extent [ 52.697870][ T4883] BTRFS warning (device loop4): try to load backup roots slot 1 [ 52.699062][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 52.701147][ T4883] BTRFS warning (device loop4): couldn't read tree root [ 52.702137][ T4883] BTRFS warning (device loop4): try to load backup roots slot 2 [ 52.711257][ T4883] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 52.713675][ T4883] BTRFS warning (device loop4): couldn't read tree root [ 52.714792][ T4883] BTRFS warning (device loop4): try to load backup roots slot 3 [ 52.731850][ T4883] BTRFS info (device loop4): rebuilding free space tree [ 52.736543][ T4883] BTRFS info (device loop4): checking UUID tree [ 53.081371][ T4474] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 53.128755][ T4330] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.232657][ T4474] usb 1-1: device descriptor read/64, error -71 [ 53.333101][ T4915] loop4: detected capacity change from 0 to 32768 [ 53.353739][ T4474] usb usb1-port1: attempt power cycle [ 53.357517][ T4915] (syz.4.106,4915,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 53.359701][ T4915] (syz.4.106,4915,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 53.417421][ T4915] JBD2: Ignoring recovery information on journal [ 53.503309][ T4915] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 53.536499][ T4915] (syz.4.106,4915,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 53.587808][ T4330] ocfs2: Unmounting device (7,4) on (node local) [ 53.683947][ T4934] fuse: Unknown parameter '0x0000000000000003' [ 53.699646][ T4935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'. [ 54.732634][ T4947] can0: slcan on ttyS3. [ 54.759706][ T4474] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 54.978650][ T4474] usb 1-1: device not accepting address 10, error -71 [ 55.297493][ T4947] loop1: detected capacity change from 0 to 32768 [ 55.309256][ T4947] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.116 (4947) [ 55.339258][ T4947] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.340786][ T4947] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 55.342049][ T4947] BTRFS info (device loop1): turning on sync discard [ 55.343509][ T4947] BTRFS info (device loop1): disabling free space tree [ 55.344618][ T4947] BTRFS info (device loop1): turning on async discard [ 55.345849][ T4947] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 55.347833][ T4947] BTRFS info (device loop1): trying to use backup root at mount time [ 55.348999][ T4947] BTRFS info (device loop1): enabling auto defrag [ 55.349903][ T4947] BTRFS info (device loop1): use zlib compression, level 3 [ 55.351228][ T4947] BTRFS error (device loop1): cannot disable free space tree [ 55.354670][ T4947] BTRFS error (device loop1): open_ctree failed: -22 [ 55.373788][ T4605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4605) [ 55.441240][ T4947] can0 (unregistered): slcan off ttyS3. [ 55.577902][ T4982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.050436][ T4994] loop0: detected capacity change from 0 to 32768 [ 56.065475][ T4994] (syz.0.123,4994,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 56.067943][ T4994] (syz.0.123,4994,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 56.108359][ T4994] JBD2: Ignoring recovery information on journal [ 56.165395][ T4994] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 56.177818][ T5009] fuse: Unknown parameter '0x0000000000000003' [ 56.189182][ T4994] (syz.0.123,4994,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 56.250468][ T4333] ocfs2: Unmounting device (7,0) on (node local) [ 56.297077][ T5015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.125'. [ 57.612600][ T5041] loop1: detected capacity change from 0 to 2048 [ 57.617811][ T5041] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 57.626293][ T5041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.628491][ T5041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.542099][ T4342] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 58.940496][ T5062] fuse: Unknown parameter '0x0000000000000003' [ 59.190646][ T5066] loop3: detected capacity change from 0 to 2048 [ 59.290600][ T5067] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.410100][ T5066] Zero length message leads to an empty skb [ 60.339207][ T5076] loop2: detected capacity change from 0 to 32768 [ 60.369863][ T5076] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.371509][ T5076] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 60.372859][ T5076] BTRFS info (device loop2): enabling auto defrag [ 60.373739][ T5076] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 60.375078][ T5076] BTRFS info (device loop2): use zstd compression, level 3 [ 60.376069][ T5076] BTRFS info (device loop2): turning on async discard [ 60.377025][ T5076] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 60.378595][ T5076] BTRFS info (device loop2): trying to use backup root at mount time [ 60.379661][ T5076] BTRFS info (device loop2): setting nodatacow, compression disabled [ 60.402575][ T5076] BTRFS info (device loop2): enabling ssd optimizations [ 60.403575][ T5076] BTRFS info (device loop2): using spread ssd allocation scheme [ 60.404678][ T5076] BTRFS info (device loop2): using free space tree [ 60.525688][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 60.527725][ T5076] BTRFS error (device loop2): failed to load root extent [ 60.528880][ T5076] BTRFS warning (device loop2): try to load backup roots slot 1 [ 60.530119][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 60.533817][ T5076] BTRFS warning (device loop2): couldn't read tree root [ 60.534997][ T5076] BTRFS warning (device loop2): try to load backup roots slot 2 [ 60.536238][ T5076] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 60.537729][ T5076] BTRFS warning (device loop2): couldn't read tree root [ 60.538823][ T5076] BTRFS warning (device loop2): try to load backup roots slot 3 [ 60.565441][ T5076] BTRFS info (device loop2): rebuilding free space tree [ 60.568381][ T5076] BTRFS info (device loop2): checking UUID tree [ 60.620915][ T4338] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.683302][ T5050] loop0: detected capacity change from 0 to 262144 [ 60.684742][ T5050] (syz.0.131,5050,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 60.686387][ T5050] (syz.0.131,5050,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 60.706965][ T5071] loop3: detected capacity change from 0 to 131072 [ 60.709453][ T5071] F2FS-fs (loop3): invalid crc value [ 60.722686][ T4604] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.768569][ T5071] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.789308][ T5071] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 60.792098][ T5071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 61.105022][ T5117] loop3: detected capacity change from 0 to 128 [ 61.108399][ T5117] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 61.110350][ T5117] hpfs: filesystem error: improperly stopped [ 61.111197][ T5117] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 61.112449][ T5117] hpfs: You really don't want any checks? You are crazy... [ 61.116751][ T5117] hpfs: hpfs_map_sector(): read error [ 61.117769][ T5117] hpfs: code page support is disabled [ 61.119311][ T5117] hpfs: hpfs_map_4sectors(): unaligned read [ 61.120426][ T5117] hpfs: hpfs_map_4sectors(): unaligned read [ 61.121264][ T5117] hpfs: filesystem error: unable to find root dir [ 61.128570][ T5117] hpfs: hpfs_map_4sectors(): unaligned read [ 63.239002][ T5133] loop2: detected capacity change from 0 to 16 [ 63.243151][ T5133] erofs: (device loop2): mounted with root inode @ nid 36. [ 63.758864][ T5139] loop2: detected capacity change from 0 to 131072 [ 63.761392][ T5139] F2FS-fs (loop2): invalid crc value [ 63.763930][ T5139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.770228][ T5139] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 63.772194][ T5139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 63.885606][ T5108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.494653][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495594][ T3433] cfg80211: failed to load regulatory.db [ 64.495696][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.298342][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.300055][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.343066][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.353776][ T5178] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 71.415533][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.418948][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.427572][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.431077][ T5182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.947559][ T5206] loop2: detected capacity change from 0 to 32768 [ 71.953472][ T5206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.176 (5206) [ 71.965490][ T5206] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.967507][ T5206] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 71.969709][ T5206] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.977449][ T5206] BTRFS info (device loop2): trying to use backup root at mount time [ 71.978944][ T5206] BTRFS info (device loop2): setting nodatasum [ 71.979964][ T5206] BTRFS info (device loop2): enabling ssd optimizations [ 71.983336][ T5206] BTRFS info (device loop2): using spread ssd allocation scheme [ 71.984884][ T5206] BTRFS info (device loop2): force zlib compression, level 3 [ 71.986556][ T5206] BTRFS info (device loop2): allowing degraded mounts [ 71.988427][ T5206] BTRFS info (device loop2): turning on flush-on-commit [ 71.989474][ T5206] BTRFS info (device loop2): setting nodatacow [ 71.990387][ T5206] BTRFS info (device loop2): using free space tree [ 72.320220][ T4338] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.481538][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.524967][ T5248] loop3: detected capacity change from 0 to 32768 [ 72.526851][ T5248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.186 (5248) [ 72.529365][ T5248] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.530842][ T5248] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 72.532014][ T5248] BTRFS info (device loop3): using free space tree [ 72.538157][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.541425][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.557340][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.597024][ T5252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.719265][ T5248] BTRFS info (device loop3): enabling ssd optimizations [ 72.735488][ T5255] loop2: detected capacity change from 0 to 40427 [ 72.763436][ T5255] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x16481 [ 72.765188][ T5255] F2FS-fs (loop2): invalid crc value [ 72.770594][ T5255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.788084][ T5255] F2FS-fs (loop2): Start checkpoint disabled! [ 72.795387][ T5255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 72.956664][ T5290] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 73.003936][ T5290] team0: Port device geneve1 added [ 73.148763][ T4325] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.473705][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 73.481676][ T4443] syzkaller0: tun_net_xmit 76 [ 73.482692][ T4443] syzkaller0: tun_net_xmit 48 [ 73.633930][ T5328] raw_sendmsg: syz.4.209 forgot to set AF_INET. Fix it! [ 73.804339][ T5331] loop1: detected capacity change from 0 to 32768 [ 73.809461][ T5331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (5331) [ 73.817192][ T5331] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.818757][ T5331] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 73.819950][ T5331] BTRFS info (device loop1): using free space tree [ 73.838685][ T5331] BTRFS info (device loop1): enabling ssd optimizations [ 74.486280][ T4326] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.404094][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 84.421862][ T5383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.565874][ T5383] device bond1 entered promiscuous mode [ 84.571991][ T5389] device macvlan2 entered promiscuous mode [ 84.574635][ T5389] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.691066][ T5399] loop1: detected capacity change from 0 to 2048 [ 84.693633][ T5399] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 84.716117][ T5375] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.723634][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.725184][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.954977][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.956351][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.270207][ T5407] device bridge_slave_0 left promiscuous mode [ 85.271415][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.327257][ T5407] device bridge_slave_1 left promiscuous mode [ 85.328573][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.369084][ T5407] bond0: (slave bond_slave_0): Releasing backup interface [ 85.416892][ T5407] bond0: (slave bond_slave_1): Releasing backup interface [ 85.478881][ T5407] team0: Port device team_slave_0 removed [ 85.497579][ T5407] team0: Port device team_slave_1 removed [ 85.500449][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.513320][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.524163][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.533441][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.818789][ T5407] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.820143][ T5407] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.821444][ T5407] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.822887][ T5407] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.868781][ T5407] team0: Port device geneve1 removed [ 86.078574][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.079919][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.084870][ T5410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.085937][ T5410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.175233][ T5412] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 86.181942][ T5412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.191819][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000d574ce33: rx timeout, send abort [ 86.193930][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000d574ce33: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.395075][ T5419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.396445][ T5419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.397716][ T5419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.399019][ T5419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403685][ T5419] bond1: (slave geneve2): making interface the new active one [ 86.406002][ T5419] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 86.432051][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 86.502144][ T5445] syz.2.242 uses obsolete (PF_INET,SOCK_PACKET) [ 86.510396][ T5445] xt_hashlimit: size too large, truncated to 1048576 [ 86.616588][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.617773][ T5451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.619381][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.621709][ T5451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.053544][ T5466] netlink: 'syz.4.250': attribute type 1 has an invalid length. [ 88.068436][ T5466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.072449][ T5470] device syzkaller0 entered promiscuous mode [ 88.082058][ T5471] bond1: (slave geneve2): making interface the new active one [ 88.089070][ T5471] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 88.137547][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 88.153929][ T5489] device syzkaller1 entered promiscuous mode [ 89.662482][ C0] sched: RT throttling activated [ 90.751833][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 90.804829][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 90.828042][ T5545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.877927][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 90.902386][ T5545] device bond2 entered promiscuous mode [ 91.326066][ T5584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 91.365670][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.367246][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.373395][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.414156][ T5576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.321779][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 92.327073][ T5599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.332013][ T5599] device bond3 entered promiscuous mode [ 93.190813][ T5617] xt_hashlimit: size too large, truncated to 1048576 [ 93.967066][ T5566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.128613][ T5628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.136094][ T5628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.137450][ T5628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.138831][ T5628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140009][ T5628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142584][ T5628] bond3: (slave geneve2): Enslaving as a backup interface with an up link [ 94.400487][ T5643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.406736][ T5643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.508199][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 95.168464][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 95.270269][ T5679] loop3: detected capacity change from 0 to 32768 [ 95.289368][ T5679] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.324 (5679) [ 95.307394][ T5679] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.308967][ T5679] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 95.310284][ T5679] BTRFS info (device loop3): enabling disk space caching [ 95.311317][ T5679] BTRFS info (device loop3): force clearing of disk cache [ 95.312174][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 95.312224][ T5679] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.324555][ T5679] BTRFS info (device loop3): use zstd compression, level 3 [ 95.325654][ T5679] BTRFS info (device loop3): disk space caching is enabled [ 95.328787][ T5687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.341080][ T5687] device bond1 entered promiscuous mode [ 95.457325][ T5679] BTRFS info (device loop3): enabling ssd optimizations [ 95.459244][ T5679] BTRFS info (device loop3): rebuilding free space tree [ 95.464579][ T5679] BTRFS info (device loop3): disabling free space tree [ 95.465813][ T5679] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.467647][ T5679] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.561702][ T4325] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.912584][ T5368] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 95.921961][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 95.941220][ T5737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.951095][ T5737] device bond4 entered promiscuous mode [ 96.035860][ T5746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 96.092915][ T5368] usb 1-1: Using ep0 maxpacket: 32 [ 96.095425][ T5368] usb 1-1: no configurations [ 96.096091][ T5368] usb 1-1: can't read configurations, error -22 [ 96.121255][ T5757] xt_hashlimit: size too large, truncated to 1048576 [ 96.168219][ T5759] infiniband syz1: set active [ 96.169464][ T5759] infiniband syz1: set active [ 96.172348][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.174197][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.176065][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.212981][ T5759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.232353][ T5749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.344'. [ 96.243900][ T5368] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 96.290094][ T5749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.344'. [ 96.423686][ T5368] usb 1-1: Using ep0 maxpacket: 32 [ 96.425961][ T5368] usb 1-1: no configurations [ 96.426700][ T5368] usb 1-1: can't read configurations, error -22 [ 96.428423][ T5368] usb usb1-port1: attempt power cycle [ 96.561394][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 96.570799][ T5774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.577813][ T5774] device macvlan2 entered promiscuous mode [ 96.579580][ T5774] device bond3 entered promiscuous mode [ 96.580769][ T5774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.635640][ T5774] device bond3 left promiscuous mode [ 96.832545][ T5368] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 96.858007][ T5785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.863100][ T5368] usb 1-1: Using ep0 maxpacket: 32 [ 96.864463][ T5368] usb 1-1: no configurations [ 96.865164][ T5368] usb 1-1: can't read configurations, error -22 [ 97.012661][ T5368] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 97.044311][ T5368] usb 1-1: Using ep0 maxpacket: 32 [ 97.045693][ T5368] usb 1-1: no configurations [ 97.046400][ T5368] usb 1-1: can't read configurations, error -22 [ 97.047538][ T5368] usb usb1-port1: unable to enumerate USB device [ 97.798769][ T5811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 98.081525][ T5824] infiniband syz1: set down [ 98.146654][ T5824] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.148351][ T5824] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.149835][ T5824] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.151221][ T5824] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.768947][ T5842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.980470][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.981838][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.089483][ T5752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.153662][ T5870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.485338][ T5898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 99.673908][ T5923] device syzkaller1 entered promiscuous mode [ 99.791322][ T5934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.918507][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.919941][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.334211][ T5960] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 100.335575][ T5960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.336827][ T5960] IPv6: NLM_F_CREATE should be set when creating new route [ 100.555071][ T5970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.238617][ T6010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.276945][ T5990] loop2: detected capacity change from 0 to 32768 [ 101.278576][ T5990] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.441 (5990) [ 101.281893][ T5990] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.283444][ T5990] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 101.284553][ T5990] BTRFS info (device loop2): enabling disk space caching [ 101.285553][ T5990] BTRFS info (device loop2): force clearing of disk cache [ 101.286767][ T5990] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.288021][ T5990] BTRFS info (device loop2): use zstd compression, level 3 [ 101.288960][ T5990] BTRFS info (device loop2): disk space caching is enabled [ 101.341263][ T5990] BTRFS info (device loop2): enabling ssd optimizations [ 101.351670][ T5990] BTRFS info (device loop2): rebuilding free space tree [ 101.357226][ T5990] BTRFS info (device loop2): disabling free space tree [ 101.358219][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.359588][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.377151][ T4338] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.428769][ T5724] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (5724) [ 101.465651][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.469273][ T6041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.562693][ T4443] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 101.742595][ T4443] usb 1-1: Using ep0 maxpacket: 32 [ 101.746828][ T4443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.748555][ T4443] usb 1-1: config 0 has no interfaces? [ 101.751578][ T4443] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.755131][ T4443] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.758784][ T4443] usb 1-1: Product: syz [ 101.759375][ T4443] usb 1-1: Manufacturer: syz [ 101.761307][ T4443] usb 1-1: SerialNumber: syz [ 101.779746][ T4443] usb 1-1: config 0 descriptor?? [ 101.989837][ T4443] usb 1-1: USB disconnect, device number 16 [ 102.172393][ T6064] loop4: detected capacity change from 0 to 32768 [ 102.199496][ T6064] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 102.261808][ T5724] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 102.478391][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.479520][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.491010][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.492068][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.940548][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.947218][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.001456][ T6099] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 103.617533][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 103.709986][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.711389][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.849835][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.855675][ T6104] loop1: detected capacity change from 0 to 32768 [ 103.861494][ T6104] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 103.866892][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.912729][ T5724] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.957063][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 104.762444][ T6149] loop3: detected capacity change from 0 to 2048 [ 104.777440][ T6149] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 104.784866][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.787369][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.834247][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 104.845415][ T6153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 105.015049][ T6160] loop1: detected capacity change from 0 to 32768 [ 105.017573][ T6160] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 105.052199][ T5724] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 105.222591][ T4374] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 105.402581][ T4374] usb 1-1: Using ep0 maxpacket: 32 [ 105.405324][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.406792][ T4374] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.409543][ T4374] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.411280][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.412938][ T4374] usb 1-1: Product: syz [ 105.413539][ T4374] usb 1-1: Manufacturer: syz [ 105.414181][ T4374] usb 1-1: SerialNumber: syz [ 105.416333][ T4374] usb 1-1: config 0 descriptor?? [ 105.621804][ T4374] usb 1-1: USB disconnect, device number 17 [ 105.931251][ T6179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.933703][ T6125] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.171287][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 106.177558][ T6185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 106.376694][ T6199] loop0: detected capacity change from 0 to 2048 [ 106.387349][ T6199] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 106.431669][ T6197] loop4: detected capacity change from 0 to 32768 [ 106.433605][ T6197] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 106.473958][ T5724] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.662541][ T4374] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 106.843847][ T4374] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.845902][ T4374] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.850672][ T4374] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.853283][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.855769][ T4374] usb 1-1: Product: syz [ 106.856448][ T4374] usb 1-1: Manufacturer: syz [ 106.857302][ T4374] usb 1-1: SerialNumber: syz [ 106.862212][ T4374] usb 1-1: config 0 descriptor?? [ 106.892083][ T4374] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 106.898481][ T5724] udevd[5724]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.071341][ T4374] usb 1-1: USB disconnect, device number 18 [ 107.310241][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 107.321388][ T6219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.494239][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.497758][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.530362][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 107.555243][ T6230] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 108.025703][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.027075][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.528409][ T6261] loop2: detected capacity change from 0 to 2048 [ 108.529863][ T6261] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 108.555035][ T5724] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.568040][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.570408][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.837365][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.838707][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.651174][ T6286] loop1: detected capacity change from 0 to 32768 [ 109.660815][ T6286] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 109.693935][ T5724] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 109.827390][ T6293] device syzkaller1 entered promiscuous mode [ 109.960658][ T6295] device syzkaller1 entered promiscuous mode [ 110.087531][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.088901][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.279598][ T6303] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 110.525028][ T6311] device syzkaller0 left promiscuous mode [ 110.820722][ T6326] device syzkaller1 entered promiscuous mode [ 110.904381][ T6275] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 110.924018][ T6330] device syzkaller0 entered promiscuous mode [ 111.052723][ T6339] device syzkaller0 entered promiscuous mode [ 111.191817][ T6346] device syzkaller1 entered promiscuous mode [ 111.195624][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.197950][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.324945][ T6350] device syzkaller0 left promiscuous mode [ 111.616101][ T6364] device syzkaller0 entered promiscuous mode [ 111.738860][ T6372] device syzkaller1 entered promiscuous mode [ 112.188878][ T6407] device syzkaller1 entered promiscuous mode [ 112.390019][ T4342] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 112.472583][ T4443] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 113.554468][ T4443] usb 1-1: Using ep0 maxpacket: 32 [ 113.556600][ T4443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.557929][ T4443] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.560604][ T4443] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.561842][ T4443] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.563179][ T4443] usb 1-1: Product: syz [ 113.563766][ T4443] usb 1-1: Manufacturer: syz [ 113.564413][ T4443] usb 1-1: SerialNumber: syz [ 113.566044][ T4443] usb 1-1: config 0 descriptor?? [ 113.640028][ T6444] device syzkaller0 entered promiscuous mode [ 113.642764][ T6444] ================================================================== [ 113.643898][ T6444] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x210/0x214 [ 113.645313][ T6444] Read of size 2 at addr ffff0000d30e6dfb by task syz.4.620/6444 [ 113.646461][ T6444] [ 113.646804][ T6444] CPU: 0 PID: 6444 Comm: syz.4.620 Not tainted syzkaller #0 [ 113.647812][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 113.649128][ T6444] Call trace: [ 113.649572][ T6444] dump_backtrace+0x1c4/0x1f0 [ 113.650234][ T6444] show_stack+0x2c/0x3c [ 113.650880][ T6444] __dump_stack+0x30/0x40 [ 113.651602][ T6444] dump_stack_lvl+0xf4/0x15c [ 113.652273][ T6444] print_address_description+0x88/0x218 [ 113.653072][ T6444] print_report+0x50/0x68 [ 113.653674][ T6444] kasan_report+0xa8/0xfc [ 113.654338][ T6444] __asan_report_load2_noabort+0x2c/0x38 [ 113.655137][ T6444] ieee80211_monitor_select_queue+0x210/0x214 [ 113.656034][ T6444] netdev_core_pick_tx+0x130/0x320 [ 113.656723][ T6444] __dev_queue_xmit+0x730/0x3154 [ 113.657401][ T6444] dev_queue_xmit+0x24/0x34 [ 113.657983][ T6444] packet_sendmsg+0x3034/0x40ac [ 113.658640][ T6444] ____sys_sendmsg+0x588/0x90c [ 113.659262][ T6444] __sys_sendmsg+0x288/0x374 [ 113.659916][ T6444] __arm64_sys_sendmsg+0x80/0x94 [ 113.660566][ T6444] invoke_syscall+0x98/0x290 [ 113.661259][ T6444] el0_svc_common+0x13c/0x258 [ 113.661921][ T6444] do_el0_svc+0x5c/0x134 [ 113.662522][ T6444] el0_svc+0x58/0x128 [ 113.663132][ T6444] el0t_64_sync_handler+0x84/0xf0 [ 113.663928][ T6444] el0t_64_sync+0x18c/0x190 [ 113.664561][ T6444] [ 113.664875][ T6444] Allocated by task 4333: [ 113.665497][ T6444] kasan_set_track+0x4c/0x80 [ 113.666124][ T6444] kasan_save_alloc_info+0x24/0x30 [ 113.666940][ T6444] __kasan_kmalloc+0xa0/0xb8 [ 113.667562][ T6444] __kmalloc_node+0xdc/0x184 [ 113.668193][ T6444] kvmalloc_node+0x88/0x1d4 [ 113.668818][ T6444] pfifo_fast_init+0x104/0x584 [ 113.669436][ T6444] qdisc_create_dflt+0x118/0x554 [ 113.670184][ T6444] mq_init+0x278/0x5b8 [ 113.670709][ T6444] qdisc_create_dflt+0x118/0x554 [ 113.671409][ T6444] dev_activate+0x1ac/0xf58 [ 113.672029][ T6444] __dev_open+0x384/0x4dc [ 113.672645][ T6444] __dev_change_flags+0x1a8/0x560 [ 113.673360][ T6444] dev_change_flags+0x80/0x15c [ 113.674041][ T6444] do_setlink+0x9d0/0x2158 [ 113.674655][ T6444] rtnl_newlink+0x142c/0x1af0 [ 113.675275][ T6444] rtnetlink_rcv_msg+0x694/0xcc4 [ 113.675987][ T6444] netlink_rcv_skb+0x220/0x3ec [ 113.676600][ T6444] rtnetlink_rcv+0x28/0x38 [ 113.677196][ T6444] netlink_unicast+0x5fc/0x80c [ 113.677831][ T6444] netlink_sendmsg+0x6f0/0x9d8 [ 113.678504][ T6444] __sys_sendto+0x324/0x440 [ 113.679096][ T6444] __arm64_sys_sendto+0xe4/0x104 [ 113.679803][ T6444] invoke_syscall+0x98/0x290 [ 113.680439][ T6444] el0_svc_common+0x13c/0x258 [ 113.681073][ T6444] do_el0_svc+0x5c/0x134 [ 113.681636][ T6444] el0_svc+0x58/0x128 [ 113.682237][ T6444] el0t_64_sync_handler+0x84/0xf0 [ 113.682922][ T6444] el0t_64_sync+0x18c/0x190 [ 113.683660][ T6444] [ 113.684058][ T6444] The buggy address belongs to the object at ffff0000d30e4000 [ 113.684058][ T6444] which belongs to the cache kmalloc-8k of size 8192 [ 113.686003][ T6444] The buggy address is located 3579 bytes to the right of [ 113.686003][ T6444] 8192-byte region [ffff0000d30e4000, ffff0000d30e6000) [ 113.688071][ T6444] [ 113.688381][ T6444] The buggy address belongs to the physical page: [ 113.689228][ T6444] page:00000000f9700363 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1130e0 [ 113.690708][ T6444] head:00000000f9700363 order:3 compound_mapcount:0 compound_pincount:0 [ 113.691891][ T6444] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 113.692997][ T6444] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002c00 [ 113.694140][ T6444] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 113.695316][ T6444] page dumped because: kasan: bad access detected [ 113.696266][ T6444] [ 113.696562][ T6444] Memory state around the buggy address: [ 113.697289][ T6444] ffff0000d30e6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.698337][ T6444] ffff0000d30e6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.699413][ T6444] >ffff0000d30e6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.700563][ T6444] ^ [ 113.701709][ T6444] ffff0000d30e6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.702761][ T6444] ffff0000d30e6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.703843][ T6444] ================================================================== [ 113.705013][ T6444] Disabling lock debugging due to kernel taint [ 113.769872][ T4443] usb 1-1: USB disconnect, device number 19 [ 113.932544][ T6378] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.222721][ T6413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512