last executing test programs: 13.393262936s ago: executing program 4 (id=413): socket$netlink(0x10, 0x3, 0x10) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x6}, {0x8, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 12.397348715s ago: executing program 4 (id=418): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc1e, &(0x7f0000001940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8979) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 11.645499755s ago: executing program 4 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file1/file1\x00', 0x125) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) 11.242682405s ago: executing program 4 (id=431): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f00000003c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x30) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x13, 0x0, "a4aa56e313d23caa70b317d382322774708b0c6d27678037ca8d40236b47f4cb5d3ddddc37216f8ec9536948ce2afe569749921ec68439628f01228bc6b425cd", "7051d65e82671fb54471eed678fa9cbdeb16a514156fa0e1142526e61bb93f2e46bee3487e8ba25d9a79dad641cba1fd830db159d760b8e75b09dafa9c969c6e", "3e73fa599619de82b7ca2e8ead0e72c8f99ebf12ccbddf17ccf94e06e9e90848", [0x8, 0x5]}) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 9.593633914s ago: executing program 4 (id=440): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0) 9.180452634s ago: executing program 4 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0xcac) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(r3, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000380)="2e6726f30fc7ffba6100b072ee6766c7442400000001006766c7442402000000006766c744240600000000670f011c2466b92d0300000f323e0f01fc0f01c90f01c566b8f2a97e630f23d00f21f86635300000050f23f8ba2100b000ee6766c7442400530000006766c7442402050000006766c744240600000000670f011c24", 0x80}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.995124124s ago: executing program 32 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0xcac) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(r3, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000380)="2e6726f30fc7ffba6100b072ee6766c7442400000001006766c7442402000000006766c744240600000000670f011c2466b92d0300000f323e0f01fc0f01c90f01c566b8f2a97e630f23d00f21f86635300000050f23f8ba2100b000ee6766c7442400530000006766c7442402050000006766c744240600000000670f011c24", 0x80}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.489749012s ago: executing program 0 (id=485): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x40, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000d000)="$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") socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000040)={0x1, 0x9}) 4.177535622s ago: executing program 2 (id=488): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 4.026455172s ago: executing program 2 (id=489): socket$netlink(0x10, 0x3, 0x10) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x6}, {0x8, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.966068672s ago: executing program 1 (id=490): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f", 0x29}], 0x1}], 0x1, 0x40800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.536449332s ago: executing program 3 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0xb, 0x1, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.334639951s ago: executing program 3 (id=493): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x20008191) unshare(0x2040400) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x141000, 0x0) fcntl$notify(r1, 0x402, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x5) 3.163296432s ago: executing program 0 (id=494): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.163069412s ago: executing program 3 (id=495): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 3.023801892s ago: executing program 1 (id=496): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) 3.015881541s ago: executing program 3 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.814091792s ago: executing program 3 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9361, 0x0) 2.701895091s ago: executing program 3 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') r1 = fanotify_init(0x20, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001200)=""/198, 0xc6) 2.461911071s ago: executing program 1 (id=500): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x1, 0x2, 0x2de}, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xc6b6, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 2.461713311s ago: executing program 2 (id=501): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 2.436693761s ago: executing program 0 (id=502): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0xbc, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 2.292666091s ago: executing program 1 (id=503): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 818.569151ms ago: executing program 1 (id=504): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 816.641571ms ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffffff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 669.385871ms ago: executing program 0 (id=505): sendmsg(0xffffffffffffffff, 0x0, 0x20004042) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 563.41796ms ago: executing program 2 (id=506): r0 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c0110000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000008001e008000000008001f0001"], 0x11c0}}, 0x20004800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 277.2582ms ago: executing program 0 (id=507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 276.85264ms ago: executing program 2 (id=508): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 107.74308ms ago: executing program 2 (id=509): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) memfd_create(0xfffffffffffffffd, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x5, 0x459, 0x6c5, 0x20208, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x1, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) mknod(&(0x7f0000000280)='./file0\x00', 0x1000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 0s ago: executing program 1 (id=510): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x40, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 57.020842][ T4158] cgroup: Unknown subsys name 'net' [ 57.160770][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.630585][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.384648][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 60.540915][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.548651][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.559824][ T4177] device bridge_slave_0 entered promiscuous mode [ 60.572781][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.581317][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.589942][ T4177] device bridge_slave_1 entered promiscuous mode [ 60.616150][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 60.679811][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.689282][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 60.720387][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.790633][ T4177] team0: Port device team_slave_0 added [ 60.811354][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 60.825119][ T4177] team0: Port device team_slave_1 added [ 60.851813][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 60.876593][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.883757][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.891760][ T4169] device bridge_slave_0 entered promiscuous mode [ 60.899430][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.907035][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.915064][ T4168] device bridge_slave_0 entered promiscuous mode [ 60.942856][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.950050][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.958536][ T4169] device bridge_slave_1 entered promiscuous mode [ 60.966728][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.973908][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.981701][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.004543][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.011514][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.037788][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.072078][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.079243][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.105949][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.157074][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.169150][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.198391][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.209444][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.237125][ T4177] device hsr_slave_0 entered promiscuous mode [ 61.245289][ T4177] device hsr_slave_1 entered promiscuous mode [ 61.274527][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.281619][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.290234][ T4171] device bridge_slave_0 entered promiscuous mode [ 61.313311][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.320716][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.328911][ T4170] device bridge_slave_0 entered promiscuous mode [ 61.344215][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.351301][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.359849][ T4171] device bridge_slave_1 entered promiscuous mode [ 61.369651][ T4169] team0: Port device team_slave_0 added [ 61.377965][ T4169] team0: Port device team_slave_1 added [ 61.387448][ T4168] team0: Port device team_slave_0 added [ 61.393500][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.400819][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.408907][ T4170] device bridge_slave_1 entered promiscuous mode [ 61.447341][ T4168] team0: Port device team_slave_1 added [ 61.501677][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.513152][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.522982][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.530449][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.556885][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.580295][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.591429][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.611402][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.618522][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.645914][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.657545][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.664858][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.690956][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.706089][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.713061][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.739092][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.789259][ T4171] team0: Port device team_slave_0 added [ 61.819089][ T4168] device hsr_slave_0 entered promiscuous mode [ 61.826891][ T4168] device hsr_slave_1 entered promiscuous mode [ 61.833632][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.842180][ T4168] Cannot create hsr debugfs directory [ 61.850442][ T4170] team0: Port device team_slave_0 added [ 61.858856][ T4170] team0: Port device team_slave_1 added [ 61.865856][ T4171] team0: Port device team_slave_1 added [ 61.939102][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.946269][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.972485][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.985624][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.992590][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.020316][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.035041][ T4169] device hsr_slave_0 entered promiscuous mode [ 62.042007][ T4169] device hsr_slave_1 entered promiscuous mode [ 62.048756][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.056423][ T4169] Cannot create hsr debugfs directory [ 62.077991][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.085095][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.111320][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.122940][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.130072][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.156269][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.174812][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.174842][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 62.175316][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 62.181191][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 62.199541][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 62.263230][ T4170] device hsr_slave_0 entered promiscuous mode [ 62.270150][ T4170] device hsr_slave_1 entered promiscuous mode [ 62.277133][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.285421][ T4170] Cannot create hsr debugfs directory [ 62.332734][ T4171] device hsr_slave_0 entered promiscuous mode [ 62.339802][ T4171] device hsr_slave_1 entered promiscuous mode [ 62.347127][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.356210][ T4171] Cannot create hsr debugfs directory [ 62.567885][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.600663][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.612867][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.631973][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.683769][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.698226][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.709604][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.723161][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.767971][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.780806][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.794209][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.803698][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.903027][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.917495][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.934383][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.946708][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.965946][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.986729][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.998487][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.010932][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.024729][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.035589][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.045556][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.052827][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.102523][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.110776][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.121791][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.130910][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.138025][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.146711][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.159049][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.168220][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.179144][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.187816][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.197761][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.206687][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.217288][ T4171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.240092][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.247362][ T4171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.259830][ T4171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.273569][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.282891][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.300340][ T4171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.318338][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.338233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.347526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.370071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.378478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.387764][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.400494][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.410773][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.419606][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.446632][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.482207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.492411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.502491][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.509917][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.546629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.561325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.572400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.587482][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.594629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.605013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.615256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.623784][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.630918][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.639308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.649116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.658380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.667326][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.674457][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.683456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.708206][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.726916][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.766488][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.778527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.788803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.798027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.806705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.816562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.825804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.834829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.843311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.852227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.862969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.870866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.879174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.887271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.897439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.908315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.916679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.927160][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.951545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.961355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.970240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.983235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.991869][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.998960][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.006921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.017217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.026222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.039753][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.048456][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.081044][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.090191][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.100078][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.107222][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.116402][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.125993][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.134848][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.143548][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.153469][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.168535][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.187741][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.198621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.211076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.220224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.232381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.241411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.251896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.255069][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 64.260411][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 64.272036][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 64.272173][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 64.290388][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 64.298728][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.310786][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.341406][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.356056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.367493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.376163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.385447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.394166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.402837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.412433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.421636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.430329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.448801][ T4177] device veth0_vlan entered promiscuous mode [ 64.465635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.485161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.499782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.508168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.523112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.560968][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.568499][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.594868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.635269][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.652509][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.662858][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.670024][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.688761][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.702478][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.713219][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.728499][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.749992][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.761764][ T4177] device veth1_vlan entered promiscuous mode [ 64.772757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.782990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.806586][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.815568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.823092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.832857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.842107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.862853][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.880556][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.905872][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.915844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.933016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.948479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.960687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.969571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.977962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.986057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.001968][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.071853][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.082674][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.105391][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.125207][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.153611][ T4177] device veth0_macvtap entered promiscuous mode [ 65.161687][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.171407][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.182667][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.202609][ T4177] device veth1_macvtap entered promiscuous mode [ 65.221974][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.231936][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.241194][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.250904][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.266446][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.276462][ T4169] device veth0_vlan entered promiscuous mode [ 65.293612][ T4168] device veth0_vlan entered promiscuous mode [ 65.312077][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.321074][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.330982][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.339796][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.350767][ T4169] device veth1_vlan entered promiscuous mode [ 65.373274][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.383365][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.391996][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.402348][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.411519][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.419426][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.427181][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.436499][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.449940][ T4168] device veth1_vlan entered promiscuous mode [ 65.464864][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.486152][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.495199][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.503288][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.512495][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.522329][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.530703][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.539466][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.549384][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.559929][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.569614][ T4170] device veth0_vlan entered promiscuous mode [ 65.579702][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590020][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.599173][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.608890][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643102][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.651834][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.660990][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.691247][ T4170] device veth1_vlan entered promiscuous mode [ 65.704539][ T4169] device veth0_macvtap entered promiscuous mode [ 65.715438][ T4169] device veth1_macvtap entered promiscuous mode [ 65.728982][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.738559][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.747724][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.757250][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.766171][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.804298][ T4168] device veth0_macvtap entered promiscuous mode [ 65.819038][ T4168] device veth1_macvtap entered promiscuous mode [ 65.840809][ T4171] device veth0_vlan entered promiscuous mode [ 65.865439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.875836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.884347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.892583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.909827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.918062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.928080][ T4171] device veth1_vlan entered promiscuous mode [ 65.949046][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.960262][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.972289][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.990785][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.004330][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.014836][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.026299][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.038167][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.053262][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.064397][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.075626][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.083144][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.091954][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.100903][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.112853][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.121938][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.130763][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.139985][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.149508][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.169918][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.180794][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.193141][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.204366][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.216656][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.231957][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.242309][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.251254][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.260844][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.275405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.284115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.295518][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.306819][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.311729][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.321423][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.325621][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.332529][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.361515][ T4171] device veth0_macvtap entered promiscuous mode [ 66.364290][ T1325] Bluetooth: hci4: command 0x040f tx timeout [ 66.373306][ T4171] device veth1_macvtap entered promiscuous mode [ 66.384804][ T1325] Bluetooth: hci3: command 0x040f tx timeout [ 66.391296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.399259][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 66.403376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.405539][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 66.416870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.419703][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 66.436633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.445364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.454251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.462879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.474128][ T4170] device veth0_macvtap entered promiscuous mode [ 66.526713][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.537458][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.548732][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.559316][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.569578][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.581021][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.592450][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.620691][ T548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.621032][ T4170] device veth1_macvtap entered promiscuous mode [ 66.628731][ T548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.649720][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.664863][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.672901][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.682904][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.691833][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.702506][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.713515][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.723928][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.735449][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.745393][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.756105][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.768230][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.801236][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.817918][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.830526][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.841225][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.851304][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.861849][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.872021][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.882951][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.896581][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.907499][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916447][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.925601][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.934504][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945140][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.954482][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.963189][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.972124][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.013511][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.034687][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046695][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.059791][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.074580][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.085666][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.095788][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.106518][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.117826][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.130720][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.140219][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.152220][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.161789][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.192235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.208793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.258352][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.268716][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.324009][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.375537][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.381002][ T4250] netlink: 452 bytes leftover after parsing attributes in process `syz.3.6'. [ 67.383543][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.461509][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.484228][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.504645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.512714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.541739][ T548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.590494][ T548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.592627][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.629653][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.649877][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.664682][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.670138][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.701953][ T548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.725174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.727735][ T548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.739009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.780449][ T4258] loop3: detected capacity change from 0 to 128 [ 67.791986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.805616][ T4258] ======================================================= [ 67.805616][ T4258] WARNING: The mand mount option has been deprecated and [ 67.805616][ T4258] and is ignored by this kernel. Remove the mand [ 67.805616][ T4258] option from the mount to silence this warning. [ 67.805616][ T4258] ======================================================= [ 67.825730][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.862938][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.884411][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.918286][ T4258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 67.935135][ T4258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 67.952150][ T4258] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 67.996748][ T4258] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 68.122305][ T4258] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 68.194730][ T4258] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.205751][ T4273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.421457][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 68.438069][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 68.461750][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 68.485059][ T4258] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 68.495991][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 68.511499][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 68.562764][ T4258] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 68.565166][ T4268] loop0: detected capacity change from 0 to 32768 [ 68.632571][ T4258] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 68.654584][ T4268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4268) [ 68.706259][ T4268] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 68.746179][ T4268] BTRFS info (device loop0): turning on sync discard [ 68.783993][ T4268] BTRFS info (device loop0): setting nodatasum [ 68.800489][ T4268] BTRFS info (device loop0): enabling auto defrag [ 68.823110][ T4268] BTRFS info (device loop0): max_inline at 0 [ 68.838668][ T4268] BTRFS info (device loop0): using free space tree [ 68.866535][ T4268] BTRFS info (device loop0): has skinny extents [ 68.891618][ T4293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 68.927089][ T4293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 69.000800][ T4302] loop2: detected capacity change from 0 to 128 [ 69.157465][ T4302] EXT4-fs (loop2): Ignoring removed nobh option [ 69.200929][ T4302] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 69.223507][ T4302] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.432273][ T4302] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 69.563536][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 69.586164][ T26] audit: type=1800 audit(1748928951.277:2): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 69.616408][ T4268] fs-verity: sha256 using implementation "sha256-avx2" [ 69.720951][ T4268] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 69.800456][ T26] audit: type=1800 audit(1748928951.487:3): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 69.859892][ T4333] loop3: detected capacity change from 0 to 2048 [ 69.877164][ T26] audit: type=1800 audit(1748928951.497:4): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 70.007304][ T4333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.391266][ T4318] device bridge1 entered promiscuous mode [ 70.447318][ T4341] overlayfs: failed to resolve './file1': -2 [ 70.655075][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 70.848327][ T4361] Illegal XDP return value 4294967274, expect packet loss! [ 71.109125][ T4363] loop4: detected capacity change from 0 to 32768 [ 71.137904][ T4370] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 71.186696][ T4246] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.188178][ T4368] infiniband syz1: set active [ 71.199434][ T4368] infiniband syz1: added syz_tun [ 71.242839][ T4363] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.29 (4363) [ 71.283918][ T4363] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 71.292669][ T4363] BTRFS info (device loop4): setting nodatacow, compression disabled [ 71.301546][ T4363] BTRFS info (device loop4): turning off barriers [ 71.308153][ T4363] BTRFS info (device loop4): force clearing of disk cache [ 71.315429][ T4363] BTRFS info (device loop4): enabling ssd optimizations [ 71.322389][ T4363] BTRFS info (device loop4): using spread ssd allocation scheme [ 71.330108][ T4363] BTRFS info (device loop4): doing ref verification [ 71.337797][ T4363] BTRFS info (device loop4): not using ssd optimizations [ 71.344904][ T4363] BTRFS info (device loop4): not using spread ssd allocation scheme [ 71.352915][ T4363] BTRFS info (device loop4): using free space tree [ 71.359797][ T4363] BTRFS info (device loop4): has skinny extents [ 71.370375][ T4368] RDS/IB: syz1: added [ 71.376927][ T4368] smc: adding ib device syz1 with port count 1 [ 71.383414][ T4368] smc: ib device syz1 port 1 has pnetid [ 71.394369][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400997][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496747][ T4246] usb 3-1: Using ep0 maxpacket: 16 [ 71.506929][ T4371] device dummy0 entered promiscuous mode [ 71.624122][ T4246] usb 3-1: config 0 has no interfaces? [ 71.705395][ T4246] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 71.721997][ T4246] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 71.733409][ T4246] usb 3-1: Manufacturer: syz [ 71.797724][ T4246] usb 3-1: config 0 descriptor?? [ 71.971892][ T4363] BTRFS info (device loop4): clearing free space tree [ 71.979181][ T4363] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.989432][ T4363] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.020453][ T4363] BTRFS info (device loop4): creating free space tree [ 72.030222][ T4363] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.040072][ T4363] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.058670][ T4363] BTRFS info (device loop4): checking UUID tree [ 72.162163][ T26] audit: type=1800 audit(1748928953.847:5): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29" name="memory.events" dev="loop4" ino=263 res=0 errno=0 [ 72.271374][ T26] audit: type=1804 audit(1748928953.857:6): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.29" name="/newroot/5/bus/memory.events" dev="loop4" ino=263 res=1 errno=0 [ 72.889620][ T4420] usb 3-1: USB disconnect, device number 2 [ 73.046826][ T4432] syz.1.44[4432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.046936][ T4432] syz.1.44[4432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.355221][ T4445] overlayfs: missing 'lowerdir' [ 73.531762][ T4453] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 73.559108][ T4455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.843505][ T4466] Zero length message leads to an empty skb [ 73.895131][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 74.084954][ T4476] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.300306][ T4490] orangefs_mount: mount request failed with -4 [ 76.441956][ C0] TC_ACT_REPEAT abuse ? [ 76.853700][ T4516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.138141][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 77.401727][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 77.460862][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 77.700502][ T2348] TC_ACT_REPEAT abuse ? [ 77.869979][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 78.452507][ T4552] loop4: detected capacity change from 0 to 512 [ 78.478477][ T4548] loop2: detected capacity change from 0 to 2048 [ 78.533264][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 78.559529][ T4548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.679969][ T4552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.694208][ T4552] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.900728][ T26] audit: type=1326 audit(1748928960.587:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 78.925124][ T4212] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.000678][ T26] audit: type=1326 audit(1748928960.617:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.051200][ T26] audit: type=1326 audit(1748928960.627:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.096408][ T26] audit: type=1326 audit(1748928960.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.136204][ T26] audit: type=1326 audit(1748928960.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.168801][ T26] audit: type=1326 audit(1748928960.647:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.197372][ T26] audit: type=1326 audit(1748928960.647:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.224943][ T4565] loop4: detected capacity change from 0 to 128 [ 79.234621][ T26] audit: type=1326 audit(1748928960.647:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.291900][ T4565] UDF-fs: bad mount option "" or missing value [ 79.327539][ T26] audit: type=1326 audit(1748928960.657:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.374026][ T4212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.383016][ T4565] trusted_key: encrypted_key: master key parameter '' is invalid [ 79.400472][ T1110] cfg80211: failed to load regulatory.db [ 79.468365][ T26] audit: type=1326 audit(1748928960.657:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f087ae969 code=0x7ffc0000 [ 79.524220][ T4212] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 79.531849][ T4212] usb 3-1: can't read configurations, error -71 [ 79.622294][ T1110] TC_ACT_REPEAT abuse ? [ 79.678717][ T4572] loop4: detected capacity change from 0 to 128 [ 81.248215][ T4613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 81.382310][ T4618] loop4: detected capacity change from 0 to 128 [ 81.446434][ T4618] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 81.493210][ T4620] loop2: detected capacity change from 0 to 512 [ 81.512587][ T4618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.665385][ T4620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.703775][ T4620] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.819188][ T4628] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 82.864324][ T4655] syz.1.133 uses obsolete (PF_INET,SOCK_PACKET) [ 83.449300][ T4679] loop0: detected capacity change from 0 to 1024 [ 83.460654][ T4212] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 83.498742][ T4212] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.838355][ T4668] loop4: detected capacity change from 0 to 32768 [ 83.942406][ T4679] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 83.952125][ T4668] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.139 (4668) [ 83.974952][ T4679] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 83.997946][ T4679] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.022835][ T4668] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 84.046609][ T4668] BTRFS info (device loop4): using free space tree [ 84.064581][ T4668] BTRFS info (device loop4): has skinny extents [ 84.103507][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sysvgroups,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 84.152605][ T4682] loop2: detected capacity change from 0 to 32768 [ 84.313187][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 84.475859][ T4692] device bond_slave_0 entered promiscuous mode [ 84.482397][ T4692] device bond_slave_1 entered promiscuous mode [ 84.513233][ T4692] device macvlan2 entered promiscuous mode [ 84.519259][ T4692] device bond0 entered promiscuous mode [ 84.527092][ T4692] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.550716][ T4668] BTRFS info (device loop4): enabling ssd optimizations [ 84.643596][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 84.643612][ T26] audit: type=1800 audit(1748928966.327:57): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 84.704309][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.709329][ T4711] device team_slave_0 entered promiscuous mode [ 84.742219][ T4711] device batadv_slave_1 entered promiscuous mode [ 84.800064][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 84.843244][ T4711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.088876][ T4711] device batadv_slave_1 left promiscuous mode [ 85.104128][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.109369][ T4711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.154345][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 85.205770][ T4723] loop3: detected capacity change from 0 to 512 [ 85.234282][ T23] usb 2-1: config 8 has an invalid interface number: 29 but max is 0 [ 85.253930][ T23] usb 2-1: config 8 has no interface number 0 [ 85.270779][ T23] usb 2-1: config 8 interface 29 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 85.297434][ T23] usb 2-1: config 8 interface 29 has no altsetting 0 [ 85.298461][ T4723] EXT4-fs (loop3): Ignoring removed nobh option [ 85.327868][ T4710] device team_slave_0 left promiscuous mode [ 85.358931][ T4723] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.410569][ T4723] EXT4-fs (loop3): invalid inodes per group: 3 [ 85.410569][ T4723] [ 85.628330][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.698563][ T23] usb 2-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 2.6a [ 85.739244][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.792833][ T23] usb 2-1: Product: Ђ [ 85.807805][ T23] usb 2-1: SerialNumber: й [ 86.064169][ T2348] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.114920][ T4744] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.138642][ T4744] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.221290][ T23] usb-storage 2-1:8.29: USB Mass Storage device detected [ 86.231899][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 86.274635][ T23] usb-storage 2-1:8.29: Quirks match for vid 054c pid 0010: 281 [ 86.295453][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 86.324984][ T23] usb-storage 2-1:8.29: This device (054c,0010,026a S 06 P f6) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.184-syzkaller) [ 86.324984][ T23] Please send a copy of this message to and [ 86.354687][ T2348] usb 1-1: Using ep0 maxpacket: 32 [ 86.464154][ T23] usb 2-1: USB disconnect, device number 2 [ 86.504183][ T2348] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 86.522915][ T2348] usb 1-1: config 0 has no interface number 0 [ 86.684167][ T2348] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 86.693595][ T2348] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 86.715996][ T2348] usb 1-1: Product: syz [ 86.720990][ T2348] usb 1-1: Manufacturer: syz [ 86.732320][ T2348] usb 1-1: SerialNumber: syz [ 86.749525][ T2348] usb 1-1: config 0 descriptor?? [ 86.915818][ T4779] loop2: detected capacity change from 0 to 64 [ 86.922307][ T4777] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.055709][ T2348] sierra 1-1:0.153: Sierra USB modem converter detected [ 87.167490][ T2348] usb 1-1: USB disconnect, device number 2 [ 87.182831][ T4785] capability: warning: `syz.1.172' uses deprecated v2 capabilities in a way that may be insecure [ 87.250080][ T2348] sierra 1-1:0.153: device disconnected [ 87.681983][ T4801] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 87.792457][ T4807] IPv6: Can't replace route, no match found [ 87.851067][ T4798] loop0: detected capacity change from 0 to 128 [ 88.231525][ T4822] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 88.511313][ T4828] tipc: Started in network mode [ 88.584118][ T4828] tipc: Node identity 6ad16bb2516c, cluster identity 4711 [ 88.597420][ T4828] tipc: Enabled bearer , priority 0 [ 88.638124][ T4824] bond1: (slave veth3): Enslaving as an active interface with a down link [ 88.834930][ T4826] bond1: (slave veth5): Enslaving as an active interface with a down link [ 88.926566][ T4829] device syzkaller0 entered promiscuous mode [ 89.157404][ T4833] loop1: detected capacity change from 0 to 128 [ 89.164793][ T4827] tipc: Resetting bearer [ 89.240930][ T4833] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.291208][ T4827] tipc: Disabling bearer [ 89.360090][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.020917][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 90.181010][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 90.379440][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 90.432174][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 90.516470][ T4858] loop1: detected capacity change from 0 to 32768 [ 90.709718][ T4881] process 'syz.0.209' launched './file2' with NULL argv: empty string added [ 90.807529][ T4884] loop2: detected capacity change from 0 to 128 [ 90.925244][ T4884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.079267][ T4884] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.395099][ T4329] udevd[4329]: incorrect jbd checksum on /dev/loop2 [ 91.410170][ T4896] loop1: detected capacity change from 0 to 1024 [ 92.024018][ T4738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.128975][ T4217] hfsplus: b-tree write err: -5, ino 4 [ 92.301404][ T4918] loop1: detected capacity change from 0 to 512 [ 92.407209][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noinit_itable,i_version,data_err=ignore,noload,bsddf,,errors=continue. Quota mode: writeback. [ 92.442129][ T4918] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.474355][ T4738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.487693][ T4738] usb 1-1: config 0 has no interface number 0 [ 92.501251][ T4738] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.524408][ T4738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.545036][ T4738] usb 1-1: config 0 descriptor?? [ 92.605541][ T4738] cp210x 1-1:0.1: cp210x converter detected [ 92.857528][ T4928] device wlan1 entered promiscuous mode [ 93.044043][ T4738] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 93.080601][ T4931] loop4: detected capacity change from 0 to 1024 [ 93.330106][ T4738] usb 1-1: cp210x converter now attached to ttyUSB0 [ 93.330138][ T4939] hfsplus: b-tree write err: -5, ino 4 [ 93.619171][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 93.655610][ T4420] usb 1-1: USB disconnect, device number 3 [ 93.666776][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 93.683347][ T4420] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 93.756732][ T4420] cp210x 1-1:0.1: device disconnected [ 93.787051][ T4955] netlink: 'syz.2.234': attribute type 12 has an invalid length. [ 94.207583][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 94.789566][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 94.887202][ T26] audit: type=1326 audit(1748928976.577:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.1.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x0 [ 94.951875][ T4992] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 95.820021][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 96.445602][ T4984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.965520][ T5017] loop1: detected capacity change from 0 to 32768 [ 97.057155][ T5017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.257 (5017) [ 97.103026][ T5049] loop3: detected capacity change from 0 to 512 [ 97.149255][ T5017] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.158631][ T5017] BTRFS info (device loop1): enabling auto defrag [ 97.166085][ T5017] BTRFS info (device loop1): doing ref verification [ 97.196190][ T5017] BTRFS info (device loop1): max_inline at 0 [ 97.215457][ T5049] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.221105][ T5017] BTRFS info (device loop1): force clearing of disk cache [ 97.221973][ T5049] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 97.270075][ T5017] BTRFS info (device loop1): turning on sync discard [ 97.286129][ T5049] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 97.322271][ T5017] BTRFS info (device loop1): disabling free space tree [ 97.328404][ T5049] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.271: attempt to clear invalid blocks 2 len 1 [ 97.346469][ T5017] BTRFS info (device loop1): has skinny extents [ 97.353782][ T5049] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.271: invalid indirect mapped block 1819239214 (level 0) [ 97.377277][ T5049] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.271: invalid indirect mapped block 1819239214 (level 1) [ 97.416954][ T5049] EXT4-fs (loop3): 1 truncate cleaned up [ 97.430053][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 97.473410][ T5049] EXT4-fs error (device loop3): ext4_remount:5855: comm syz.3.271: Abort forced by user [ 97.486260][ T5049] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 97.528514][ T5064] EXT4-fs error (device loop3): ext4_lookup:1855: inode #2: comm syz.3.271: 'file1' linked to parent dir [ 97.891950][ T5017] BTRFS info (device loop1): enabling ssd optimizations [ 97.900613][ T5017] BTRFS info (device loop1): clearing free space tree [ 97.907958][ T5017] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.919056][ T5017] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.453883][ T4350] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.864147][ T4350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.970348][ T4350] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.993700][ T4350] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 447 [ 99.028427][ T5103] tipc: Failed to remove unknown binding: 66,1,1/0:2808937653/2808937655 [ 99.074836][ T5103] tipc: Failed to remove unknown binding: 66,1,1/0:2808937653/2808937655 [ 99.098218][ T5103] tipc: Failed to remove unknown binding: 66,1,1/0:2808937653/2808937655 [ 99.174389][ T4350] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.200374][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.229213][ T4350] usb 5-1: Product: syz [ 99.233439][ T4350] usb 5-1: Manufacturer: syz [ 99.254165][ T4350] usb 5-1: SerialNumber: syz [ 99.373308][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 99.532243][ T5128] netlink: 'syz.2.293': attribute type 12 has an invalid length. [ 99.555665][ T4350] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 99.562519][ T4350] cdc_ncm 5-1:1.0: bind() failure [ 99.621863][ T4350] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 99.632378][ T4350] cdc_ncm 5-1:1.1: bind() failure [ 99.647524][ T4350] usb 5-1: USB disconnect, device number 2 [ 99.752533][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 99.792732][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 100.247478][ T5154] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 100.302305][ T5154] SQUASHFS error: Failed to read block 0x0: -5 [ 100.589120][ T5163] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.309'. [ 100.627081][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 100.889903][ T5171] netlink: 35 bytes leftover after parsing attributes in process `syz.1.312'. [ 101.031033][ T5177] netlink: 452 bytes leftover after parsing attributes in process `syz.0.316'. [ 101.075131][ T5181] loop1: detected capacity change from 0 to 1024 [ 101.109795][ T5181] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.155902][ T5186] loop0: detected capacity change from 0 to 512 [ 101.188265][ T5181] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 101.264662][ T5186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.278291][ T5186] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.578914][ T5200] vivid-001: disconnect [ 101.600331][ T5200] vivid-001: reconnect [ 101.702456][ T5208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.326'. [ 101.714000][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 101.797276][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 101.831631][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 101.919340][ T5217] device syzkaller1 entered promiscuous mode [ 102.243542][ T5213] IPVS: You probably need to specify IP address on multicast interface. [ 102.253609][ T5213] IPVS: Error connecting to the multicast addr [ 102.519945][ T5228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.726640][ T5239] xt_policy: neither incoming nor outgoing policy selected [ 102.974415][ T4350] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 103.130641][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 103.235866][ T5252] loop0: detected capacity change from 0 to 128 [ 103.278196][ T5252] EXT4-fs (loop0): Test dummy encryption mode enabled [ 103.323982][ T5252] EXT4-fs (loop0): Test dummy encryption mode enabled [ 103.330806][ T5252] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 103.360545][ T5257] vivid-004: disconnect [ 103.363894][ T5252] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 103.376259][ T5257] vivid-004: reconnect [ 103.391577][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 103.505319][ T4350] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 103.519298][ T5252] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.542408][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.572272][ T4350] usb 3-1: Product: syz [ 103.583423][ T4350] usb 3-1: Manufacturer: syz [ 103.599866][ T4350] usb 3-1: SerialNumber: syz [ 103.627176][ T4350] usb 3-1: config 0 descriptor?? [ 103.661394][ T5252] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 103.706964][ T5252] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 104.089226][ T4352] usb 3-1: USB disconnect, device number 5 [ 104.331057][ T5254] IPVS: You probably need to specify IP address on multicast interface. [ 104.351320][ T5254] IPVS: Error connecting to the multicast addr [ 104.739140][ T5285] netlink: 'syz.4.354': attribute type 12 has an invalid length. [ 105.697102][ T5287] loop1: detected capacity change from 0 to 32768 [ 105.851336][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 105.888116][ T5287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.356 (5287) [ 105.942185][ T5287] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 105.984211][ T5287] BTRFS info (device loop1): turning on sync discard [ 105.991016][ T5287] BTRFS info (device loop1): setting nodatasum [ 106.039573][ T5287] BTRFS info (device loop1): enabling auto defrag [ 106.069995][ T5287] BTRFS info (device loop1): max_inline at 0 [ 106.086080][ T5287] BTRFS info (device loop1): using free space tree [ 106.118831][ T5287] BTRFS info (device loop1): has skinny extents [ 106.222741][ T5299] loop3: detected capacity change from 0 to 32768 [ 106.785308][ T26] audit: type=1800 audit(1748928988.477:59): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 106.789817][ T5287] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 107.049340][ T26] audit: type=1800 audit(1748928988.737:60): pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 107.182515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 107.224285][ T26] audit: type=1804 audit(1748928988.777:61): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.356" name="/newroot/76/file1/file0/file0" dev="loop1" ino=258 res=1 errno=0 [ 107.744286][ T26] audit: type=1800 audit(1748928988.777:62): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 108.486915][ T5339] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.375'. [ 108.752488][ T5343] syz.4.367[5343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.752597][ T5343] syz.4.367[5343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.411650][ T5354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.506743][ T5338] loop3: detected capacity change from 0 to 32768 [ 109.565193][ T5331] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 109.934137][ T5331] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 109.963413][ T5331] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 109.987645][ T5331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 110.053996][ T5331] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 110.105582][ T5331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 110.131158][ T5331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 110.394127][ T5331] usb 5-1: string descriptor 0 read error: -22 [ 110.401616][ T5331] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 110.451873][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.490170][ T5331] usb 5-1: config 0 descriptor?? [ 110.524202][ T5350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.544916][ T5331] hub 5-1:0.0: bad descriptor, ignoring hub [ 110.552034][ T5331] hub: probe of 5-1:0.0 failed with error -5 [ 110.561875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 110.584530][ T5331] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 110.937122][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 110.955552][ T4245] usb 5-1: USB disconnect, device number 3 [ 111.103088][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 111.326350][ T5386] netlink: 172 bytes leftover after parsing attributes in process `syz.3.383'. [ 112.103598][ T5391] loop2: detected capacity change from 0 to 32768 [ 112.402443][ T26] audit: type=1326 audit(1748928994.087:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.438532][ T26] audit: type=1326 audit(1748928994.087:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.470992][ T26] audit: type=1326 audit(1748928994.127:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.510448][ T26] audit: type=1326 audit(1748928994.127:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.654663][ T26] audit: type=1326 audit(1748928994.127:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.786946][ T26] audit: type=1326 audit(1748928994.137:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.861116][ T26] audit: type=1326 audit(1748928994.137:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd5d0969 code=0x7ffc0000 [ 112.884055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 112.894133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 113.407528][ T5436] loop0: detected capacity change from 0 to 2048 [ 113.448426][ T5436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.586133][ T5440] binder_alloc: 5439: binder_alloc_buf, no vma [ 114.399404][ T5443] loop3: detected capacity change from 0 to 40427 [ 114.455848][ T5443] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 114.524470][ T5443] F2FS-fs (loop3): invalid crc value [ 114.582391][ T5443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.830578][ T5443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.128580][ T5463] loop0: detected capacity change from 0 to 128 [ 115.155940][ T5443] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x103/0x1170 [ 115.165022][ T5467] loop2: detected capacity change from 0 to 512 [ 115.208861][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 115.310091][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.328000][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.348771][ T5463] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.364098][ T5467] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.437957][ T4177] attempt to access beyond end of device [ 115.437957][ T4177] loop3: rw=2049, want=45112, limit=40427 [ 115.523094][ T5468] team0 (unregistering): Port device team_slave_0 removed [ 115.686255][ T5468] team0 (unregistering): Port device team_slave_1 removed [ 115.833116][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 115.873260][ T5477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 116.034622][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 116.231816][ T5485] loop4: detected capacity change from 0 to 2048 [ 116.355593][ T5485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.853101][ T5501] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.968273][ T5497] loop3: detected capacity change from 0 to 8192 [ 117.124452][ T5497] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 117.376584][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 117.439595][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 117.501846][ T5487] loop2: detected capacity change from 0 to 32768 [ 117.646093][ T5487] XFS (loop2): Mounting V5 Filesystem [ 117.646612][ T5515] team0 (unregistering): Port device team_slave_0 removed [ 117.685917][ T5515] team0 (unregistering): Port device team_slave_1 removed [ 117.894744][ T5487] XFS (loop2): Ending clean mount [ 117.916061][ T26] audit: type=1326 audit(1748928999.607:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 117.984855][ T5487] XFS (loop2): Quotacheck needed: Please wait. [ 118.000932][ T26] audit: type=1326 audit(1748928999.657:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.059608][ T26] audit: type=1326 audit(1748928999.667:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.131438][ T26] audit: type=1326 audit(1748928999.667:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.152435][ T5513] loop4: detected capacity change from 0 to 2048 [ 118.194063][ T26] audit: type=1326 audit(1748928999.667:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.223105][ T5487] XFS (loop2): Quotacheck: Done. [ 118.235960][ T5513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.274453][ T4419] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.289468][ T26] audit: type=1326 audit(1748928999.677:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.411603][ T26] audit: type=1326 audit(1748928999.677:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.441148][ T5513] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 118.451184][ T26] audit: type=1326 audit(1748928999.677:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.530227][ T26] audit: type=1326 audit(1748928999.677:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.621918][ T26] audit: type=1326 audit(1748928999.687:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc150a6f969 code=0x7ffc0000 [ 118.684276][ T4419] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 118.693499][ T4419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.769794][ T4419] usb 4-1: config 0 descriptor?? [ 118.796927][ T4170] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 118.813500][ T4170] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 118.817780][ T4419] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.935228][ T2348] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 118.952609][ T4168] XFS (loop2): Unmounting Filesystem [ 119.345203][ T2348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.419575][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.474025][ T2348] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 119.488626][ T2348] usb 2-1: can't read configurations, error -71 [ 119.537845][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.672786][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.714060][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 119.902018][ T5562] team0 (unregistering): Port device team_slave_0 removed [ 119.933634][ T5562] team0 (unregistering): Port device team_slave_1 removed [ 119.992094][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.228098][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 120.243132][ T5578] loop0: detected capacity change from 0 to 1024 [ 120.263294][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 120.350562][ T5578] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.468086][ T4419] usb 4-1: USB disconnect, device number 2 [ 121.283654][ T5565] chnl_net:caif_netlink_parms(): no params data found [ 121.389503][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 121.669640][ T5646] loop3: detected capacity change from 0 to 128 [ 121.806137][ T5646] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 121.846134][ T5646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.855786][ T4352] Bluetooth: hci1: command 0x0409 tx timeout [ 121.932808][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.993933][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.002343][ T5565] device bridge_slave_0 entered promiscuous mode [ 122.189906][ T5565] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.206317][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.286422][ T5565] device bridge_slave_1 entered promiscuous mode [ 122.525561][ T5565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.608769][ T5565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.842830][ T5565] team0: Port device team_slave_0 added [ 122.869446][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 123.271261][ T144] device hsr_slave_0 left promiscuous mode [ 123.278203][ T144] device hsr_slave_1 left promiscuous mode [ 123.285926][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.293415][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.307382][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.315259][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.323362][ T144] device bridge_slave_1 left promiscuous mode [ 123.332027][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.350910][ T144] device bridge_slave_0 left promiscuous mode [ 123.360043][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.394156][ T144] device veth1_macvtap left promiscuous mode [ 123.400931][ T144] device veth0_macvtap left promiscuous mode [ 123.433185][ T144] device veth1_vlan left promiscuous mode [ 123.442040][ T144] device veth0_vlan left promiscuous mode [ 123.451300][ T5707] loop0: detected capacity change from 0 to 512 [ 123.513032][ T5707] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.557537][ T5707] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.850714][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.878189][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.934020][ T4419] Bluetooth: hci1: command 0x041b tx timeout [ 124.045835][ T144] bond0 (unregistering): Released all slaves [ 124.112859][ T5565] team0: Port device team_slave_1 added [ 124.138261][ T5696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 124.260314][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.292064][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.373844][ T5565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.388144][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.401929][ T5716] loop0: detected capacity change from 0 to 32768 [ 124.409242][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.444589][ T5565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.458942][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 124.481528][ T5716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.485 (5716) [ 124.591669][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 124.598576][ T5716] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 124.633930][ T5716] BTRFS info (device loop0): using free space tree [ 124.640558][ T5716] BTRFS info (device loop0): has skinny extents [ 125.042543][ T5727] team0 (unregistering): Port device team_slave_0 removed [ 125.092027][ T5727] team0 (unregistering): Port device team_slave_1 removed [ 125.197799][ T5716] BTRFS info (device loop0): enabling ssd optimizations [ 125.591816][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4326) [ 125.904443][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 125.939828][ T5565] device hsr_slave_0 entered promiscuous mode [ 125.970791][ T5565] device hsr_slave_1 entered promiscuous mode [ 125.995153][ T5565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.002753][ T5565] Cannot create hsr debugfs directory [ 126.014104][ T4352] Bluetooth: hci1: command 0x040f tx timeout [ 126.130802][ T5327] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 126.163704][ T5327] infiniband syz1: set down [ 126.248827][ T4939] smc: removing ib device syz1 [ 126.294191][ T5331] infiniband syz1: ib_query_port failed (-19) [ 126.424118][ T4352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.673932][ T4352] usb 3-1: Using ep0 maxpacket: 8 [ 126.880288][ T5565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.912521][ T5565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.950561][ T5565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.957756][ T4352] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 126.994346][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.002583][ T4352] usb 3-1: Product: syz [ 127.022956][ T5565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.033927][ T4352] usb 3-1: Manufacturer: syz [ 127.038681][ T4352] usb 3-1: SerialNumber: syz [ 127.086382][ T4352] usb 3-1: config 0 descriptor?? [ 127.138464][ T4352] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 127.328503][ T4352] usb 3-1: USB disconnect, device number 6 [ 127.351049][ T5565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.382673][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.420024][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.446533][ T5565] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.472783][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.491340][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.507949][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.515355][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.562370][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.580953][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.602026][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.621535][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.628676][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.689149][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.762154][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.795400][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.883123][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.920453][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.974464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.991918][ T5819] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.506'. [ 128.001648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.041354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.054444][ T5819] netlink: 104 bytes leftover after parsing attributes in process `syz.2.506'. [ 128.069550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.089684][ T5565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.100631][ T4352] Bluetooth: hci1: command 0x0419 tx timeout [ 128.129662][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.168912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.196570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.396410][ T4939] ------------[ cut here ]------------ [ 128.402575][ T4939] GID entry ref leak for dev syz1 index 2 ref=1 [ 128.478986][ T4939] WARNING: CPU: 0 PID: 4939 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 128.509761][ T5834] 9pnet: p9_errstr2errno: server reported unknown error  [ 128.652640][ T4939] Modules linked in: [ 128.754186][ T4939] CPU: 0 PID: 4939 Comm: kworker/u4:8 Not tainted 5.15.184-syzkaller #0 [ 128.772828][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.803549][ T4939] Workqueue: events_unbound ib_unregister_work [ 128.821424][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.837611][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.848777][ T4939] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 128.854036][ T4352] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.902936][ T5565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.917115][ T4939] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 a5 e2 8a 48 8b 74 24 20 44 89 fa e8 c1 3c 7a 02 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 129.124113][ T4939] RSP: 0018:ffffc900035efae8 EFLAGS: 00010246 [ 129.132888][ T4939] RAX: 90a50fab476e7d00 RBX: ffff888018390ed8 RCX: ffff888029aa1dc0 [ 129.158628][ T4939] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 129.178915][ T4939] RBP: 1ffff110030721c0 R08: dffffc0000000000 R09: ffffed10172067a8 [ 129.224065][ T4352] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 129.247679][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.284827][ T4352] usb 2-1: config 0 descriptor?? [ 129.293304][ T4939] R10: ffffed10172067a8 R11: 1ffff110172067a7 R12: 1ffff110030721db [ 129.363920][ T4939] R13: ffff888018390e00 R14: ffff888023460a00 R15: 0000000000000002 [ 129.466085][ T4939] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 129.521854][ T4939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.564262][ T4939] CR2: 0000200000039030 CR3: 00000000767ea000 CR4: 00000000003506f0 [ 129.594875][ T4939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.603173][ T4939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.674234][ T4939] Call Trace: [ 129.677684][ T4939] [ 129.684371][ T4939] ib_device_release+0xce/0x1b0 [ 129.689312][ T4939] ? ib_device_uevent+0xa0/0xa0 [ 129.718573][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.738336][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.807485][ T4939] device_release+0x92/0x1c0 [ 129.836217][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.847897][ T4939] kobject_put+0x21d/0x460 [ 129.852355][ T4939] process_one_work+0x863/0x1000 [ 129.877628][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.884441][ T4939] ? worker_detach_from_pool+0x240/0x240 [ 129.890953][ T4939] ? lockdep_hardirqs_off+0x70/0x100 [ 129.913848][ T4939] ? _raw_spin_lock_irq+0xab/0xe0 [ 129.917654][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.934266][ T4939] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 129.944273][ T4939] ? wq_worker_running+0x97/0x170 [ 129.968910][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.975583][ T4939] worker_thread+0xaa8/0x12a0 [ 129.980842][ T4939] ? lockdep_hardirqs_on+0x94/0x140 [ 130.016458][ T5565] device veth0_vlan entered promiscuous mode [ 130.022917][ T4939] ? lockdep_hardirqs_on+0x94/0x140 [ 130.040782][ T4939] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 130.058813][ T5565] device veth1_vlan entered promiscuous mode [ 130.074093][ T4939] kthread+0x436/0x520 [ 130.080401][ T4939] ? rcu_lock_release+0x20/0x20 [ 130.103462][ T4939] ? kthread_blkcg+0xd0/0xd0 [ 130.124433][ T4939] ret_from_fork+0x1f/0x30 [ 130.143865][ T4939] [ 130.150441][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.155572][ T4939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.165491][ T4939] CPU: 0 PID: 4939 Comm: kworker/u4:8 Not tainted 5.15.184-syzkaller #0 [ 130.173864][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.179836][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.184021][ T4939] Workqueue: events_unbound ib_unregister_work [ 130.184051][ T4939] Call Trace: [ 130.184060][ T4939] [ 130.184069][ T4939] dump_stack_lvl+0x168/0x230 [ 130.184094][ T4939] ? show_regs_print_info+0x20/0x20 [ 130.184113][ T4939] ? load_image+0x3b0/0x3b0 [ 130.184144][ T4939] panic+0x2c9/0x7f0 [ 130.184173][ T4939] ? bpf_jit_dump+0xd0/0xd0 [ 130.184204][ T4939] ? ret_from_fork+0x1f/0x30 [ 130.231539][ T4939] ? gid_table_release_one+0x30f/0x490 [ 130.237005][ T4939] __warn+0x248/0x2b0 [ 130.240997][ T4939] ? gid_table_release_one+0x30f/0x490 [ 130.246461][ T4939] report_bug+0x1b7/0x2e0 [ 130.250831][ T4939] handle_bug+0x3a/0x70 [ 130.255126][ T4939] exc_invalid_op+0x16/0x40 [ 130.259745][ T4939] asm_exc_invalid_op+0x16/0x20 [ 130.264599][ T4939] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 130.270670][ T4939] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 a0 a5 e2 8a 48 8b 74 24 20 44 89 fa e8 c1 3c 7a 02 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 130.290273][ T4939] RSP: 0018:ffffc900035efae8 EFLAGS: 00010246 [ 130.296342][ T4939] RAX: 90a50fab476e7d00 RBX: ffff888018390ed8 RCX: ffff888029aa1dc0 [ 130.304315][ T4939] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 130.312524][ T4939] RBP: 1ffff110030721c0 R08: dffffc0000000000 R09: ffffed10172067a8 [ 130.320588][ T4939] R10: ffffed10172067a8 R11: 1ffff110172067a7 R12: 1ffff110030721db [ 130.328564][ T4939] R13: ffff888018390e00 R14: ffff888023460a00 R15: 0000000000000002 [ 130.336551][ T4939] ? gid_table_release_one+0x30f/0x490 [ 130.342114][ T4939] ib_device_release+0xce/0x1b0 [ 130.346982][ T4939] ? ib_device_uevent+0xa0/0xa0 [ 130.352008][ T4939] device_release+0x92/0x1c0 [ 130.356625][ T4939] kobject_put+0x21d/0x460 [ 130.361066][ T4939] process_one_work+0x863/0x1000 [ 130.366015][ T4939] ? worker_detach_from_pool+0x240/0x240 [ 130.371656][ T4939] ? lockdep_hardirqs_off+0x70/0x100 [ 130.376966][ T4939] ? _raw_spin_lock_irq+0xab/0xe0 [ 130.382078][ T4939] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 130.387467][ T4939] ? wq_worker_running+0x97/0x170 [ 130.392510][ T4939] worker_thread+0xaa8/0x12a0 [ 130.397212][ T4939] ? lockdep_hardirqs_on+0x94/0x140 [ 130.402440][ T4939] ? lockdep_hardirqs_on+0x94/0x140 [ 130.407645][ T4939] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 130.413552][ T4939] kthread+0x436/0x520 [ 130.417719][ T4939] ? rcu_lock_release+0x20/0x20 [ 130.422573][ T4939] ? kthread_blkcg+0xd0/0xd0 [ 130.427473][ T4939] ret_from_fork+0x1f/0x30 [ 130.431909][ T4939] [ 130.435221][ T4939] Kernel Offset: disabled [ 130.439800][ T4939] Rebooting in 86400 seconds..