last executing test programs: 21.603912733s ago: executing program 4 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x8000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5fe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000580)='f2fs_map_blocks\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5bf5, 0x0, r7, 0xc199, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r6, 0x16, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r7, r5, 0x33, 0x0, r5, @void, @value=r8, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r3, 0xffffffffffffffff, 0x10, 0x9, r3, @void, @value=r2, @void, @void, r9}, 0x20) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r13, 0x800, 0x55007}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xc2cb}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r13, r1, 0x33, 0x2014, 0x0, @value, @void, @void, @void, r9}, 0x20) 21.046027521s ago: executing program 4 (id=376): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aa9678aaaaaaffffffffffff81000e000800c501001400fcff00310090"], 0x0) 20.872172663s ago: executing program 4 (id=378): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 20.784530284s ago: executing program 4 (id=381): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.856273889s ago: executing program 4 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.287311741s ago: executing program 4 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.746963635s ago: executing program 3 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xffffffff}]}, 0x30}}, 0x0) 2.408117139s ago: executing program 3 (id=656): unshare(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x3, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'wg2\x00', {0x8}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xff], 0x6, 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a66f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/199, 0xc7}], 0x1}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r5, 0x1) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 1.600414089s ago: executing program 2 (id=670): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.476900071s ago: executing program 3 (id=673): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 1.405033872s ago: executing program 2 (id=674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.303600063s ago: executing program 3 (id=676): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.264281463s ago: executing program 2 (id=677): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 1.182111395s ago: executing program 3 (id=679): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)="c0c957d020443ad68b", 0x9}, 0x1, 0x0, 0x0, 0x804}, 0x4048801) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 1.119500065s ago: executing program 2 (id=680): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @random="9b4cdd871ebb", 'wg1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) 1.000498987s ago: executing program 1 (id=683): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 982.506507ms ago: executing program 2 (id=684): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 840.197559ms ago: executing program 1 (id=685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) sendmsg$inet6(r3, &(0x7f0000004540)={0x0, 0x0, 0x0}, 0x18040811) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) 718.70184ms ago: executing program 2 (id=688): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r0, &(0x7f0000000040), 0x400000000000145, 0x120, 0x0) 636.238082ms ago: executing program 0 (id=689): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x40, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x40}}, 0x44000) 543.778093ms ago: executing program 0 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x54}}, 0x0) 418.515664ms ago: executing program 1 (id=691): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 360.007565ms ago: executing program 0 (id=692): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x8, 0xa00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 327.175665ms ago: executing program 0 (id=693): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 302.601476ms ago: executing program 1 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x80) 144.216448ms ago: executing program 0 (id=695): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 137.196348ms ago: executing program 1 (id=696): unshare(0x60480) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) 87.658239ms ago: executing program 3 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socket$rds(0x15, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050052}, 0x404c891) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xf, 0x80000, 0x100000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0xaf, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x4040000) 181.94µs ago: executing program 0 (id=698): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 1 (id=699): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="a6d79ec6a679bf2ed34f", 0xa}, {0x0}], 0x2}}], 0x2, 0x4048805) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 53.449643][ T4155] cgroup: Unknown subsys name 'net' [ 53.666033][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.020857][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.326709][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 56.423197][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 56.496662][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 56.506640][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.513979][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.522106][ T4166] device bridge_slave_0 entered promiscuous mode [ 56.532736][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.539779][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.547490][ T4166] device bridge_slave_1 entered promiscuous mode [ 56.575849][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 56.601314][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 56.622319][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.651340][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.707891][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.715127][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.723238][ T4171] device bridge_slave_0 entered promiscuous mode [ 56.739643][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.746713][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.754649][ T4172] device bridge_slave_0 entered promiscuous mode [ 56.762873][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.769928][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.778233][ T4172] device bridge_slave_1 entered promiscuous mode [ 56.791057][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.798224][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.806079][ T4171] device bridge_slave_1 entered promiscuous mode [ 56.817452][ T4166] team0: Port device team_slave_0 added [ 56.846959][ T4166] team0: Port device team_slave_1 added [ 56.891868][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.898969][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.906776][ T4168] device bridge_slave_0 entered promiscuous mode [ 56.916270][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.925544][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.932748][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.940550][ T4167] device bridge_slave_0 entered promiscuous mode [ 56.949182][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.965041][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.972384][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.980091][ T4168] device bridge_slave_1 entered promiscuous mode [ 56.988299][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.997577][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.004771][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.012583][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.021113][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.030909][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.037848][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.063885][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.066433][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.081525][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.107400][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.156785][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.190038][ T4171] team0: Port device team_slave_0 added [ 57.198115][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.208985][ T4172] team0: Port device team_slave_0 added [ 57.216440][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.234644][ T4171] team0: Port device team_slave_1 added [ 57.254108][ T4172] team0: Port device team_slave_1 added [ 57.268369][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.298887][ T4168] team0: Port device team_slave_0 added [ 57.315559][ T4166] device hsr_slave_0 entered promiscuous mode [ 57.322507][ T4166] device hsr_slave_1 entered promiscuous mode [ 57.329491][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.336601][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.362606][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.388929][ T4168] team0: Port device team_slave_1 added [ 57.403345][ T4167] team0: Port device team_slave_0 added [ 57.409766][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.416886][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.442791][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.454418][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.461437][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.487898][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.508336][ T4167] team0: Port device team_slave_1 added [ 57.518524][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.525742][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.551669][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.601884][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.608825][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.634995][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.649504][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.656633][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.682644][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.697406][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.704471][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.731099][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.743375][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.750393][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.776348][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.812272][ T4172] device hsr_slave_0 entered promiscuous mode [ 57.819437][ T4172] device hsr_slave_1 entered promiscuous mode [ 57.826121][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.833912][ T4172] Cannot create hsr debugfs directory [ 57.874604][ T4171] device hsr_slave_0 entered promiscuous mode [ 57.881351][ T4171] device hsr_slave_1 entered promiscuous mode [ 57.887813][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.895655][ T4171] Cannot create hsr debugfs directory [ 57.910061][ T4168] device hsr_slave_0 entered promiscuous mode [ 57.917015][ T4168] device hsr_slave_1 entered promiscuous mode [ 57.923644][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.931255][ T4168] Cannot create hsr debugfs directory [ 58.014698][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.021562][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.028661][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.036386][ T4167] Cannot create hsr debugfs directory [ 58.111332][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 58.111332][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 58.123931][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 58.130221][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 58.145510][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 58.271536][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.281399][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.290668][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.299836][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.345981][ T4166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.355438][ T4166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.364141][ T4166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.375333][ T4166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.434268][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.466601][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.475814][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.493793][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.517322][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.538531][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.563872][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.575959][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.611686][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.626294][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.635294][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.647122][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.660912][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.679637][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.700294][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.708740][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.720190][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.728869][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.737206][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.745571][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.753475][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.762314][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.771168][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.778340][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.786728][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.811340][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.823444][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.832656][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.839725][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.847932][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.856629][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.865811][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.872871][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.880784][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.889287][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.897887][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.906287][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.913343][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.927555][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.945467][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.961228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.993004][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.003284][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.012442][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.021496][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.034873][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.043815][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.052903][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.063797][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.087179][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.097728][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.119297][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.127478][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.139654][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.156788][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.165580][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.174009][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.182684][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.191426][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.200168][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.208468][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.240480][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.247277][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.256583][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.277107][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.304402][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.317514][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.337202][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.344673][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.353074][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.361645][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.369273][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.384410][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.393742][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.402768][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.409832][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.447719][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.456964][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.465027][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.476411][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.485179][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.493625][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.500678][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.508466][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.517584][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.526141][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.533211][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.541154][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.549682][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.558744][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.565823][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.573478][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.582823][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.592909][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.601612][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.610495][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.622069][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.630761][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.652771][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.668038][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.678740][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.687844][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.696466][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.706116][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.718899][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.727843][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.736328][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.744946][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.758833][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.766971][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.784641][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.794279][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.803056][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.812432][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.820820][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.829297][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.839359][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.847974][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.867055][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.879925][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.911999][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.924203][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.936389][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.955905][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.974697][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.985745][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.992945][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.007887][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.016590][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.025138][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.032218][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.040118][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.049115][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.056742][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.065279][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.073542][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.082895][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.091403][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.099811][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.108789][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.119264][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.127116][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.141101][ T4172] device veth0_vlan entered promiscuous mode [ 60.159357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.177945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.188770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.200688][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 60.203731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.206907][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 60.216137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.231421][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 60.234837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.237484][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 60.258523][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.266671][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 60.277201][ T4172] device veth1_vlan entered promiscuous mode [ 60.290096][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.303035][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.316395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.325640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.334306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.343340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.351862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.360139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.400839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.410158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.424486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.437572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.448598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.457649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.466235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.486915][ T4172] device veth0_macvtap entered promiscuous mode [ 60.495593][ T4168] device veth0_vlan entered promiscuous mode [ 60.509882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.520031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.535718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.551766][ T4172] device veth1_macvtap entered promiscuous mode [ 60.561097][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.569724][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.578945][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.608071][ T4168] device veth1_vlan entered promiscuous mode [ 60.629211][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.640252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.649235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.656783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.665562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.674836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.686426][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.698805][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.718239][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.728588][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.742871][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.752832][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.761836][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.770803][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.797462][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.806603][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.815778][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.824473][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.832405][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.839812][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.847763][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.871447][ T4166] device veth0_vlan entered promiscuous mode [ 60.883050][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.892095][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.902199][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.910630][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.945538][ T4166] device veth1_vlan entered promiscuous mode [ 60.955465][ T4168] device veth0_macvtap entered promiscuous mode [ 60.974862][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.986951][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.996744][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.006167][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.014754][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.023323][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.032130][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.039815][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.052804][ T4171] device veth0_vlan entered promiscuous mode [ 61.060250][ T4168] device veth1_macvtap entered promiscuous mode [ 61.086252][ T4171] device veth1_vlan entered promiscuous mode [ 61.118919][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.129800][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.141510][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.155823][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.163942][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.172458][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.180270][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.190889][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.199254][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.209863][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.220909][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.232864][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.243325][ T4167] device veth0_vlan entered promiscuous mode [ 61.250933][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.259622][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.268658][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.277588][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.298998][ T4166] device veth0_macvtap entered promiscuous mode [ 61.309272][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.312478][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.321183][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.333627][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.342674][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.351588][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.359740][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.368343][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.377261][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.385468][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.394034][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.401878][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.414711][ T4167] device veth1_vlan entered promiscuous mode [ 61.435570][ T4166] device veth1_macvtap entered promiscuous mode [ 61.465042][ T4171] device veth0_macvtap entered promiscuous mode [ 61.475689][ T4171] device veth1_macvtap entered promiscuous mode [ 61.489154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.497264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.505418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.514968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.523468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.534506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.542750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.579645][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.579772][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.591147][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.603981][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.615700][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.626323][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.638387][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.650980][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.659564][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.668288][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.676190][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.685026][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.697938][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.708557][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.723391][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.734085][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.744096][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.754577][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.765922][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.777644][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.788361][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.799115][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.809900][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.822184][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.831468][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.842164][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.852501][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.865668][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.876032][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.886666][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.898083][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.910083][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.919152][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.928098][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.937425][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.946473][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.956014][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.968356][ T4167] device veth0_macvtap entered promiscuous mode [ 61.988504][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.997870][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.006573][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.015939][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.035931][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.046235][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.056076][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.065377][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.077710][ T4167] device veth1_macvtap entered promiscuous mode [ 62.102690][ T474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.113119][ T474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.137370][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.147151][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.222508][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.234903][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.245148][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.255979][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.265994][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.276974][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 62.283285][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.293472][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 62.297545][ T4243] loop3: detected capacity change from 0 to 2048 [ 62.299534][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 62.312435][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.323167][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 62.327114][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.340781][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.356718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.358270][ T474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.365130][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 62.381427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.403275][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.417887][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.428397][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.431730][ T474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.447470][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.452761][ T4243] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.457330][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.478357][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.488216][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.488972][ T4243] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.498808][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.539959][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.561125][ T4243] fs-verity: sha512 using implementation "sha512-avx2" [ 62.566303][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.568520][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.583968][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.588123][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.601031][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.609894][ T4243] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 62.612004][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.638761][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.649308][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.658798][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.669651][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.727343][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.770094][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.786658][ T4250] loop1: detected capacity change from 0 to 2048 [ 62.807856][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.828056][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.832707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.847814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.867902][ T474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.877964][ T4250] UDF-fs: bad mount option "uid=00000000000000000000-" or missing value [ 62.917436][ T474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.918281][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.945555][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.973313][ T4254] PKCS8: Unsupported PKCS#8 version [ 62.978787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.985321][ T4254] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.988032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.024128][ T474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050357][ T474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.066680][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.119609][ T4260] loop2: detected capacity change from 0 to 1024 [ 63.471469][ T4260] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,abort,,errors=continue. Quota mode: none. [ 63.498780][ T4260] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.697959][ T4270] loop4: detected capacity change from 0 to 32768 [ 63.806653][ T4270] ======================================================= [ 63.806653][ T4270] WARNING: The mand mount option has been deprecated and [ 63.806653][ T4270] and is ignored by this kernel. Remove the mand [ 63.806653][ T4270] option from the mount to silence this warning. [ 63.806653][ T4270] ======================================================= [ 64.023820][ T4270] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 64.259928][ T4270] (syz.4.8,4270,1):ocfs2_clear_journal_error:1063 ERROR: File system error -318767104 recorded in journal 0. [ 64.273125][ T4270] (syz.4.8,4270,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 64.288544][ T4270] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 64.396696][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 64.404223][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 64.410330][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 64.416360][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 64.441333][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 64.470556][ T4251] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.537424][ T4260] fuse: Unknown parameter 'group7N9O00000000000000000000' [ 64.550905][ T4260] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.3: path /0/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 64.641137][ T4270] usb usb7: usbfs: process 4270 (syz.4.8) did not claim interface 0 before use [ 64.671961][ T4270] syz.4.8 (4270) used greatest stack depth: 21000 bytes left [ 64.749676][ T4166] ocfs2: Unmounting device (7,4) on (node local) [ 64.764634][ T4251] usb 4-1: Using ep0 maxpacket: 32 [ 64.770432][ T4286] loop2: detected capacity change from 0 to 512 [ 64.851659][ T4286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.10: inode #1: comm syz.2.10: iget: illegal inode # [ 64.894043][ T4286] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.10: error while reading EA inode 1 err=-117 [ 64.927405][ T4286] EXT4-fs (loop2): 1 orphan inode deleted [ 64.970578][ T4286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.211130][ T4251] usb 4-1: config 4 has an invalid interface number: 247 but max is 1 [ 65.234228][ T4251] usb 4-1: config 4 has an invalid interface number: 36 but max is 1 [ 65.266239][ T4251] usb 4-1: config 4 has an invalid interface number: 114 but max is 1 [ 65.291295][ T4251] usb 4-1: config 4 has an invalid descriptor of length 238, skipping remainder of the config [ 65.330217][ T4251] usb 4-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 65.349490][ T4251] usb 4-1: config 4 has no interface number 0 [ 65.388392][ T4283] delete_channel: no stack [ 65.407697][ T4251] usb 4-1: config 4 has no interface number 1 [ 65.425656][ T4251] usb 4-1: config 4 has no interface number 2 [ 65.444597][ T4251] usb 4-1: config 4 interface 247 altsetting 60 has an invalid endpoint with address 0x80, skipping [ 65.479025][ T4251] usb 4-1: config 4 interface 247 altsetting 60 endpoint 0x7 has invalid maxpacket 1015, setting to 64 [ 65.510235][ T4251] usb 4-1: config 4 interface 247 altsetting 60 bulk endpoint 0x6 has invalid maxpacket 8 [ 65.560216][ T4251] usb 4-1: config 4 interface 247 altsetting 60 endpoint 0x2 has an invalid bInterval 111, changing to 7 [ 65.600215][ T4251] usb 4-1: config 4 interface 247 altsetting 60 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 65.655882][ T4251] usb 4-1: config 4 interface 247 altsetting 60 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 65.685970][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 65.695046][ T4251] usb 4-1: too many endpoints for config 4 interface 36 altsetting 217: 158, using maximum allowed: 30 [ 65.712927][ T4251] usb 4-1: config 4 interface 36 altsetting 217 has a duplicate endpoint with address 0x2, skipping [ 65.726995][ T4251] usb 4-1: config 4 interface 36 altsetting 217 has a duplicate endpoint with address 0x7, skipping [ 65.741230][ T4251] usb 4-1: config 4 interface 36 altsetting 217 has 2 endpoint descriptors, different from the interface descriptor's value: 158 [ 65.759127][ T4251] usb 4-1: config 4 interface 114 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 65.771461][ T4251] usb 4-1: config 4 interface 114 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 65.789054][ T4251] usb 4-1: config 4 interface 247 has no altsetting 0 [ 65.798313][ T4251] usb 4-1: config 4 interface 36 has no altsetting 0 [ 65.809466][ T4251] usb 4-1: config 4 interface 114 has no altsetting 0 [ 65.928770][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078c8f400: rx timeout, send abort [ 66.040501][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.063159][ T4251] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffd3, bcdDevice=9e.5e [ 66.076046][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.080311][ C1] sched: RT throttling activated [ 66.092582][ T4251] usb 4-1: Product: syz [ 66.097304][ T4251] usb 4-1: Manufacturer: ᐁ [ 66.106092][ T4251] usb 4-1: SerialNumber: syz [ 66.140867][ T4278] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.255418][ T7] usb 5-1: device descriptor read/64, error -71 [ 66.551514][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.581279][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 66.597363][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 66.610882][ T4312] device bridge0 entered promiscuous mode [ 66.618117][ T4312] device bridge0 left promiscuous mode [ 66.780473][ T7] usb 5-1: device descriptor read/64, error -71 [ 66.901797][ T7] usb usb5-port1: attempt power cycle [ 67.340599][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.471406][ T7] usb 5-1: device descriptor read/8, error -71 [ 67.658458][ T4251] option 4-1:4.247: GSM modem (1-port) converter detected [ 67.750512][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.799749][ T4332] lo speed is unknown, defaulting to 1000 [ 67.853727][ T4251] usb 4-1: USB disconnect, device number 2 [ 67.881307][ T7] usb 5-1: device descriptor read/8, error -71 [ 67.891603][ T4332] lo speed is unknown, defaulting to 1000 [ 67.925545][ T4251] option 4-1:4.247: device disconnected [ 67.987215][ T4332] lo speed is unknown, defaulting to 1000 [ 68.013077][ T7] usb usb5-port1: unable to enumerate USB device [ 68.096003][ T4332] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.117234][ T4332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 68.319483][ T4332] lo speed is unknown, defaulting to 1000 [ 68.330801][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 68.344710][ T4332] lo speed is unknown, defaulting to 1000 [ 68.367453][ T4332] lo speed is unknown, defaulting to 1000 [ 68.387540][ T4332] lo speed is unknown, defaulting to 1000 [ 68.403786][ T4332] lo speed is unknown, defaulting to 1000 [ 68.453836][ T4359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.460573][ T4359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.491534][ T4359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.498061][ T4359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.530355][ T4359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.536776][ T4359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.562272][ T4359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.568779][ T4359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.606435][ T4359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.612859][ T4359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.776070][ T4373] device veth1_to_bond entered promiscuous mode [ 69.173781][ T4391] netlink: 14 bytes leftover after parsing attributes in process `syz.3.51'. [ 69.195609][ T4395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.280247][ T4398] netlink: 'syz.0.54': attribute type 5 has an invalid length. [ 69.584627][ T4372] device veth1_to_bond left promiscuous mode [ 69.829013][ T4433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.64'. [ 69.919118][ T4433] bridge0: port 3(gretap0) entered blocking state [ 69.927120][ T4433] bridge0: port 3(gretap0) entered disabled state [ 69.943462][ T4433] device gretap0 entered promiscuous mode [ 69.950367][ T4433] bridge0: port 3(gretap0) entered blocking state [ 69.957034][ T4433] bridge0: port 3(gretap0) entered forwarding state [ 70.005888][ T4445] device veth0 entered promiscuous mode [ 70.051215][ T4445] device veth0 left promiscuous mode [ 70.112794][ T4451] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 70.298168][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 70.318608][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 70.630235][ T4486] xt_CT: No such helper "netbios-ns" [ 70.656642][ T4489] Zero length message leads to an empty skb [ 70.709461][ T4495] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 70.805556][ T4502] lo speed is unknown, defaulting to 1000 [ 70.885635][ T4506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.000598][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.007231][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.594724][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 71.613769][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 71.662457][ T4539] atomic_op ffff888022ad9198 conn xmit_atomic 0000000000000000 [ 71.677983][ T4537] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.687023][ T4537] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.695890][ T4537] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.704641][ T4537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.317971][ T4585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 72.521955][ T4597] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.536906][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.556020][ T4597] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 72.639915][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.670068][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.709903][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.749171][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.771992][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.792613][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.815744][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.835029][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 72.859905][ T4597] lo speed is unknown, defaulting to 1000 [ 73.531053][ T4639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.669991][ T4648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.678906][ T4648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.687660][ T4648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.692889][ T4647] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 73.696857][ T4648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.746307][ T4648] device vxlan0 entered promiscuous mode [ 74.262381][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.276653][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.285954][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.380170][ T4671] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96 [ 74.456805][ T4672] rdma_rxe: rxe creation allowed on top of a real device only [ 74.510740][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 75.410592][ T4723] device sit0 entered promiscuous mode [ 75.432146][ T4723] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 75.784345][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.822690][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.848083][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.859959][ T4741] device bridge_slave_0 left promiscuous mode [ 75.868182][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.916991][ T4741] device bridge_slave_1 left promiscuous mode [ 75.934608][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.967363][ T4741] bond0: (slave bond_slave_0): Releasing backup interface [ 76.024247][ T4741] bond0: (slave bond_slave_1): Releasing backup interface [ 76.113628][ T1111] cfg80211: failed to load regulatory.db [ 76.149092][ T4741] team0: Port device team_slave_0 removed [ 76.199464][ T4741] team0: Port device team_slave_1 removed [ 76.219596][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.235491][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.248068][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.262471][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.323955][ T4741] syz.4.199 (4741) used greatest stack depth: 20800 bytes left [ 76.463587][ T4772] netlink: 'syz.3.211': attribute type 12 has an invalid length. [ 76.616951][ T4777] __nla_validate_parse: 54 callbacks suppressed [ 76.616967][ T4777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.214'. [ 76.710192][ T4781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.081805][ T4794] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 77.089552][ T4794] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 77.123757][ T4798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.140437][ T4794] netlink: 'syz.0.222': attribute type 12 has an invalid length. [ 77.254598][ T4803] lo speed is unknown, defaulting to 1000 [ 78.252085][ T4832] 8021q: VLANs not supported on vcan0 [ 78.308672][ T4834] sctp: [Deprecated]: syz.2.239 (pid 4834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.308672][ T4834] Use struct sctp_sack_info instead [ 78.549618][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 78.813869][ T4861] net_ratelimit: 1053 callbacks suppressed [ 78.813886][ T4861] Dead loop on virtual device ip6_vti0, fix it urgently! [ 79.012013][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 79.414437][ T4896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.422103][ T4896] IPv6: NLM_F_CREATE should be set when creating new route [ 79.429440][ T4896] IPv6: NLM_F_CREATE should be set when creating new route [ 79.436793][ T4896] IPv6: NLM_F_CREATE should be set when creating new route [ 79.861385][ T4919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.182048][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 80.270637][ T4943] device netdevsim0 entered promiscuous mode [ 80.658478][ T4963] tipc: Started in network mode [ 80.691017][ T4963] tipc: Node identity ac14140f, cluster identity 4711 [ 80.719706][ T4963] tipc: Enabled bearer , priority 10 [ 80.767036][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 80.784345][ T4969] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 80.808477][ T4969] netlink: 'syz.3.292': attribute type 2 has an invalid length. [ 80.816729][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 80.975825][ T4976] netlink: 88 bytes leftover after parsing attributes in process `syz.4.295'. [ 80.996770][ T4976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.295'. [ 81.099229][ T4980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.297'. [ 81.837370][ T23] tipc: Node number set to 2886997007 [ 82.232652][ T5030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 82.325884][ T4276] bond0: (slave bond_slave_0): interface is now down [ 82.355716][ T4276] bond0: (slave bond_slave_1): interface is now down [ 82.387964][ T4276] bond0: now running without any active interface! [ 83.224097][ T5079] netlink: 392 bytes leftover after parsing attributes in process `syz.2.336'. [ 83.757723][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f953400: rx timeout, send abort [ 83.869116][ T5105] lo speed is unknown, defaulting to 1000 [ 84.266514][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f953400: abort rx timeout. Force session deactivation [ 84.623995][ T5137] device batadv_slave_0 entered promiscuous mode [ 84.660933][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 84.696166][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 84.824573][ T5136] device batadv_slave_0 left promiscuous mode [ 84.973577][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 85.199765][ T5156] device sit0 left promiscuous mode [ 85.380232][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.397839][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.423787][ T5156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.527123][ T5156] syz.4.368 (5156) used greatest stack depth: 20224 bytes left [ 86.375207][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 87.235256][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 87.654979][ T5255] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 87.762283][ T5260] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 87.901818][ T5268] netlink: set zone limit has 8 unknown bytes [ 88.443333][ T5289] lo speed is unknown, defaulting to 1000 [ 88.554656][ T5297] device netdevsim0 entered promiscuous mode [ 88.583911][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 88.623386][ T5292] lo speed is unknown, defaulting to 1000 [ 89.107812][ T5289] chnl_net:caif_netlink_parms(): no params data found [ 89.388326][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.405606][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.424649][ T5289] device bridge_slave_0 entered promiscuous mode [ 89.442309][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.465678][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.474016][ T5289] device bridge_slave_1 entered promiscuous mode [ 89.493185][ T5337] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 89.514577][ T5337] netlink: 72 bytes leftover after parsing attributes in process `syz.1.439'. [ 89.548462][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.594999][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.653554][ T5343] netlink: 'syz.1.442': attribute type 2 has an invalid length. [ 89.743413][ T5289] team0: Port device team_slave_0 added [ 89.774759][ T5289] team0: Port device team_slave_1 added [ 89.875100][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892218][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.921613][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.953886][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.970350][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.004805][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.160487][ T5289] device hsr_slave_0 entered promiscuous mode [ 90.178948][ T5289] device hsr_slave_1 entered promiscuous mode [ 90.211399][ T5368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.246057][ T5289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.260761][ T5289] Cannot create hsr debugfs directory [ 90.364587][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 90.375167][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 90.561575][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.460'. [ 90.726148][ T5289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.909949][ T5289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.028132][ T5289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.116794][ T5289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.303237][ T5415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'. [ 91.377083][ T5289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.418385][ T5289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.459823][ T5289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.583164][ T5417] crypto_alloc_aead failed rc=-4 [ 91.599104][ T5421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.669181][ T5289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.796080][ T5421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.892392][ T5421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.960504][ T5421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.130583][ T5452] netlink: 156 bytes leftover after parsing attributes in process `syz.0.480'. [ 92.157421][ T5421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184041][ T5421] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205183][ T5421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.223325][ T5421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430484][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 92.486460][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.515888][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.524372][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.565416][ T5289] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.587712][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.606792][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.650849][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.657908][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.709044][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.731834][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.761124][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.769499][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.776612][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.803710][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.863000][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.891717][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.919412][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.939235][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.967865][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.001342][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.026374][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.049663][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.072875][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.092916][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.114675][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.130744][ T5489] netlink: 'syz.3.496': attribute type 12 has an invalid length. [ 93.158267][ T5489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 93.189058][ T5489] bond0: option primary_reselect: invalid value (8) [ 93.472292][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.490696][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 93.559147][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.586521][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.897361][ T5548] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 93.944597][ T5548] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.967764][ T5548] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.977352][ T144] bond0: (slave team0): interface is now down [ 94.004344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.021398][ T144] bond0: (slave team0): interface is now down [ 94.027096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.040511][ T144] bond0: (slave team0): interface is now down [ 94.061541][ T144] bond0: (slave team0): interface is now down [ 94.104078][ T1280] bond0: (slave team0): interface is now down [ 94.123648][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.140546][ T1280] bond0: (slave team0): interface is now down [ 94.149393][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.165594][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.172932][ T9] bond0: (slave team0): interface is now down [ 94.190261][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.210797][ T9] bond0: (slave team0): interface is now down [ 94.222903][ T5289] device veth0_vlan entered promiscuous mode [ 94.240591][ T1280] bond0: (slave team0): interface is now down [ 94.248473][ T5558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 94.270621][ T1280] bond0: (slave team0): interface is now down [ 94.287923][ T5289] device veth1_vlan entered promiscuous mode [ 94.300529][ T4276] bond0: (slave team0): interface is now down [ 94.330420][ T4276] bond0: (slave team0): interface is now down [ 94.355568][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.363900][ T9] bond0: (slave team0): interface is now down [ 94.373995][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.394433][ T5289] device veth0_macvtap entered promiscuous mode [ 94.400812][ T9] bond0: (slave team0): interface is now down [ 94.425457][ T5289] device veth1_macvtap entered promiscuous mode [ 94.432524][ T154] bond0: (slave team0): interface is now down [ 94.447505][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.459170][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.460412][ T154] bond0: (slave team0): interface is now down [ 94.469721][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.490390][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.502168][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.511753][ T154] bond0: (slave team0): interface is now down [ 94.520684][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 94.527223][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.542871][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.560003][ T154] bond0: (slave team0): interface is now down [ 94.577968][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.590550][ T144] bond0: (slave team0): interface is now down [ 94.598692][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.620976][ T144] bond0: (slave team0): interface is now down [ 94.653405][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.682041][ T144] bond0: (slave team0): interface is now down [ 94.700391][ T154] bond0: (slave team0): interface is now down [ 94.711575][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 94.720383][ T4276] bond0: (slave team0): interface is now down [ 94.736851][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.748511][ T144] bond0: (slave team0): interface is now down [ 94.754904][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.765754][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.790898][ T154] bond0: (slave team0): interface is now down [ 94.809059][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.831420][ T144] bond0: (slave team0): interface is now down [ 94.843025][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.853690][ T4276] bond0: (slave team0): interface is now down [ 94.858444][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.870363][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.871472][ T144] bond0: (slave team0): interface is now down [ 94.883368][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.895360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.919335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.920532][ T4276] bond0: (slave team0): interface is now down [ 94.955546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.980385][ T144] bond0: (slave team0): interface is now down [ 94.991356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.001150][ T154] bond0: (slave team0): interface is now down [ 95.003266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.026303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.030953][ T144] bond0: (slave team0): interface is now down [ 95.055885][ T5289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.075901][ T144] bond0: (slave team0): interface is now down [ 95.082302][ T5289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092339][ T5289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.102368][ T5289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.112478][ T9] bond0: (slave team0): interface is now down [ 95.134343][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 95.150942][ T154] bond0: (slave team0): interface is now down [ 95.190626][ T154] bond0: (slave team0): interface is now down [ 95.221256][ T144] bond0: (slave team0): interface is now down [ 95.233068][ T144] bond0: now running without any active interface! [ 95.302410][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.326165][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.369512][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.402259][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.429524][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.462923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.207911][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.215317][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.662416][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.713104][ T5625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.136620][ T5625] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.145971][ T5625] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.155560][ T5625] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.165803][ T5625] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.250917][ T5625] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.259842][ T5625] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.269032][ T5625] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.277944][ T5625] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.287306][ T5625] device vxlan0 left promiscuous mode [ 97.323965][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.347272][ T5625] syz.2.545 (5625) used greatest stack depth: 20000 bytes left [ 97.444097][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.653405][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 97.654129][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 97.673399][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 97.683647][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 97.720240][ T5658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.827238][ T5662] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 97.868468][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.955709][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 98.038679][ T5673] lo speed is unknown, defaulting to 1000 [ 98.220139][ T5681] tipc: Started in network mode [ 98.227947][ T5681] tipc: Node identity ac14140f, cluster identity 4711 [ 98.240561][ T5681] tipc: New replicast peer: 255.255.255.255 [ 98.247217][ T5681] tipc: Enabled bearer , priority 10 [ 98.260943][ T5684] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 98.281220][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 98.290232][ T5681] tipc: Disabling bearer [ 98.325050][ T5673] chnl_net:caif_netlink_parms(): no params data found [ 98.387799][ T5686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.567'. [ 98.530544][ T5694] x_tables: duplicate underflow at hook 2 [ 98.552401][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.611362][ T5701] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 98.631213][ T5701] device veth1_macvtap left promiscuous mode [ 98.641003][ T5701] team0: Device veth1_macvtap failed to register rx_handler [ 98.738101][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.845325][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.890237][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.915614][ T5673] device bridge_slave_0 entered promiscuous mode [ 98.929540][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.943145][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.966680][ T5673] device bridge_slave_1 entered promiscuous mode [ 99.086508][ T5673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.152424][ T5673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.351226][ T5673] team0: Port device team_slave_0 added [ 99.381390][ T5673] team0: Port device team_slave_1 added [ 99.549203][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.580071][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.697420][ T5673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.805737][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.832666][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.888635][ T5673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.044433][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 100.058106][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.066056][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.074152][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 100.082740][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.090156][ T5773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.099858][ T5773] device bridge_slave_0 left promiscuous mode [ 100.107024][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.117286][ T5773] device bridge_slave_1 left promiscuous mode [ 100.124100][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.134957][ T5773] bond0: (slave bond_slave_0): Releasing backup interface [ 100.151064][ T5773] bond0: (slave bond_slave_1): Releasing backup interface [ 100.180540][ T5773] team0: Port device team_slave_0 removed [ 100.190765][ T5773] team0: Port device team_slave_1 removed [ 100.197368][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.204945][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.218589][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.226194][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.377745][ T5673] device hsr_slave_0 entered promiscuous mode [ 100.415524][ T5673] device hsr_slave_1 entered promiscuous mode [ 100.442293][ T5673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.478858][ T5673] Cannot create hsr debugfs directory [ 100.699858][ T5796] __nla_validate_parse: 1 callbacks suppressed [ 100.699872][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 100.759734][ T5799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.607'. [ 101.295119][ T5808] lo speed is unknown, defaulting to 1000 [ 101.424944][ T154] device hsr_slave_0 left promiscuous mode [ 101.502299][ T154] device hsr_slave_1 left promiscuous mode [ 101.523155][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.542801][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.581482][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.588967][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.626433][ T154] device bridge_slave_1 left promiscuous mode [ 101.641216][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.661822][ T154] device bridge_slave_0 left promiscuous mode [ 101.681158][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.762502][ T154] device veth1_macvtap left promiscuous mode [ 101.769287][ T154] device veth0_macvtap left promiscuous mode [ 101.775918][ T154] device veth1_vlan left promiscuous mode [ 101.782559][ T154] device veth0_vlan left promiscuous mode [ 101.972677][ T154] team0 (unregistering): Port device team_slave_1 removed [ 101.989072][ T154] team0 (unregistering): Port device team_slave_0 removed [ 102.001436][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.016458][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.088347][ T154] bond0 (unregistering): Released all slaves [ 102.110609][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 102.472033][ T5858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.481586][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 102.532367][ T5673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.560953][ T5673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.599985][ T5673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.644792][ T5673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.969320][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.008456][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.639'. [ 103.051671][ T5673] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.090774][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.105685][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.154526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.173751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.223091][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.230159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.252929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.269098][ T5908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.642'. [ 103.289215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.311477][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.318685][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.363759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.381901][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.397229][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.530984][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.575218][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.631525][ T5907] bond0 (unregistering): (slave team0): Releasing backup interface [ 103.661493][ T5907] bond0 (unregistering): Released all slaves [ 103.733867][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.758830][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.783767][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.825652][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.858927][ T5673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.961126][ T5673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.007573][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.043378][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.056851][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.095816][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.125977][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.183398][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.200399][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 104.282886][ T5957] x_tables: duplicate underflow at hook 2 [ 104.374781][ T5965] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 104.452862][ T5965] team0: Device veth1_macvtap failed to register rx_handler [ 104.581598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.603139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.641609][ T5966] rdma_rxe: rxe creation allowed on top of a real device only [ 104.659129][ T5673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.108098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.151864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.236968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.278970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.319551][ T5673] device veth0_vlan entered promiscuous mode [ 105.342576][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.356123][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.423569][ T5673] device veth1_vlan entered promiscuous mode [ 105.522236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.536266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.560928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.625419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.645112][ T5673] device veth0_macvtap entered promiscuous mode [ 105.656570][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 105.717464][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 105.738927][ T5673] device veth1_macvtap entered promiscuous mode [ 105.771786][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.807097][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.846095][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.857101][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.869128][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.904238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.922171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.956632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.987868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.015871][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.043508][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.054179][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.064847][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.075837][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.098172][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.137405][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.164146][ T5673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.180925][ T5673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.189627][ T5673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213666][ T5673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.280727][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 106.387878][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.409291][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.444801][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.480859][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.519085][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.560053][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.692453][ T6070] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 106.693248][ T5673] [ 106.701208][ T5673] ====================================================== [ 106.708212][ T5673] WARNING: possible circular locking dependency detected [ 106.715234][ T5673] 5.15.180-syzkaller #0 Not tainted [ 106.720427][ T5673] ------------------------------------------------------ [ 106.725983][ T6070] lo speed is unknown, defaulting to 1000 [ 106.727427][ T5673] syz-executor/5673 is trying to acquire lock: [ 106.727437][ T5673] ffff88807b47b120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x100/0x2f0 [ 106.749709][ T5673] [ 106.749709][ T5673] but task is already holding lock: [ 106.757062][ T5673] ffffffff8d371b08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 106.766629][ T5673] [ 106.766629][ T5673] which lock already depends on the new lock. [ 106.766629][ T5673] [ 106.777017][ T5673] [ 106.777017][ T5673] the existing dependency chain (in reverse order) is: [ 106.786018][ T5673] [ 106.786018][ T5673] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 106.793748][ T5673] __mutex_lock_common+0x1eb/0x2390 [ 106.799465][ T5673] mutex_lock_nested+0x17/0x20 [ 106.804750][ T5673] hci_remote_features_evt+0x5cf/0xa10 [ 106.810736][ T5673] hci_event_packet+0x613/0x12f0 [ 106.816191][ T5673] hci_rx_work+0x255/0xa10 [ 106.821123][ T5673] process_one_work+0x863/0x1000 [ 106.826565][ T5673] worker_thread+0xaa8/0x12a0 [ 106.831747][ T5673] kthread+0x436/0x520 [ 106.836326][ T5673] ret_from_fork+0x1f/0x30 [ 106.841253][ T5673] [ 106.841253][ T5673] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 106.848525][ T5673] __mutex_lock_common+0x1eb/0x2390 [ 106.854234][ T5673] mutex_lock_nested+0x17/0x20 [ 106.859500][ T5673] sco_sock_connect+0x18f/0x910 [ 106.864853][ T5673] __sys_connect+0x389/0x410 [ 106.869951][ T5673] __x64_sys_connect+0x76/0x80 [ 106.875218][ T5673] do_syscall_64+0x4c/0xa0 [ 106.880141][ T5673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.886535][ T5673] [ 106.886535][ T5673] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 106.895637][ T5673] __lock_acquire+0x2c33/0x7c60 [ 106.900992][ T5673] lock_acquire+0x197/0x3f0 [ 106.905996][ T5673] lock_sock_nested+0x44/0x100 [ 106.911262][ T5673] sco_conn_del+0x100/0x2f0 [ 106.916266][ T5673] hci_conn_hash_flush+0x107/0x220 [ 106.921897][ T5673] hci_dev_do_close+0x991/0x1030 [ 106.927334][ T5673] hci_unregister_dev+0x2d7/0x580 [ 106.932859][ T5673] vhci_release+0x73/0xc0 [ 106.937689][ T5673] __fput+0x234/0x930 [ 106.942170][ T5673] task_work_run+0x125/0x1a0 [ 106.947263][ T5673] do_exit+0x616/0x20a0 [ 106.951954][ T5673] do_group_exit+0x12e/0x300 [ 106.957058][ T5673] __x64_sys_exit_group+0x3b/0x40 [ 106.962583][ T5673] do_syscall_64+0x4c/0xa0 [ 106.967503][ T5673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.973900][ T5673] [ 106.973900][ T5673] other info that might help us debug this: [ 106.973900][ T5673] [ 106.984105][ T5673] Chain exists of: [ 106.984105][ T5673] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 106.984105][ T5673] [ 106.998331][ T5673] Possible unsafe locking scenario: [ 106.998331][ T5673] [ 107.005759][ T5673] CPU0 CPU1 [ 107.011103][ T5673] ---- ---- [ 107.016443][ T5673] lock(hci_cb_list_lock); [ 107.020924][ T5673] lock(&hdev->lock); [ 107.027487][ T5673] lock(hci_cb_list_lock); [ 107.034489][ T5673] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 107.040370][ T5673] [ 107.040370][ T5673] *** DEADLOCK *** [ 107.040370][ T5673] [ 107.048495][ T5673] 3 locks held by syz-executor/5673: [ 107.053755][ T5673] #0: ffff88802aca0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 107.063480][ T5673] #1: ffff88802aca0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 107.072936][ T5673] #2: ffffffff8d371b08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 107.082912][ T5673] [ 107.082912][ T5673] stack backtrace: [ 107.088801][ T5673] CPU: 0 PID: 5673 Comm: syz-executor Not tainted 5.15.180-syzkaller #0 [ 107.097105][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.107159][ T5673] Call Trace: [ 107.110432][ T5673] [ 107.113350][ T5673] dump_stack_lvl+0x168/0x230 [ 107.118013][ T5673] ? load_image+0x3b0/0x3b0 [ 107.122505][ T5673] ? show_regs_print_info+0x20/0x20 [ 107.127692][ T5673] ? print_circular_bug+0x12b/0x1a0 [ 107.132870][ T5673] check_noncircular+0x274/0x310 [ 107.137790][ T5673] ? add_chain_block+0x940/0x940 [ 107.142706][ T5673] ? lockdep_lock+0xdc/0x1e0 [ 107.147281][ T5673] ? lockdep_unlock+0x134/0x2d0 [ 107.152203][ T5673] ? mark_lock+0x94/0x320 [ 107.156609][ T5673] __lock_acquire+0x2c33/0x7c60 [ 107.161455][ T5673] ? verify_lock_unused+0x140/0x140 [ 107.166636][ T5673] ? verify_lock_unused+0x140/0x140 [ 107.171823][ T5673] ? __mutex_trylock_common+0x14f/0x250 [ 107.177355][ T5673] ? __mutex_trylock_common+0x14f/0x250 [ 107.182882][ T5673] lock_acquire+0x197/0x3f0 [ 107.187368][ T5673] ? sco_conn_del+0x100/0x2f0 [ 107.192031][ T5673] ? read_lock_is_recursive+0x10/0x10 [ 107.197391][ T5673] ? __lock_acquire+0x7c60/0x7c60 [ 107.202398][ T5673] ? __rwlock_init+0x140/0x140 [ 107.207138][ T5673] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 107.212752][ T5673] lock_sock_nested+0x44/0x100 [ 107.217496][ T5673] ? sco_conn_del+0x100/0x2f0 [ 107.222157][ T5673] sco_conn_del+0x100/0x2f0 [ 107.226663][ T5673] ? sco_connect_cfm+0xa40/0xa40 [ 107.231589][ T5673] hci_conn_hash_flush+0x107/0x220 [ 107.236682][ T5673] hci_dev_do_close+0x991/0x1030 [ 107.241602][ T5673] ? blocking_notifier_chain_unregister+0x115/0x210 [ 107.248178][ T5673] hci_unregister_dev+0x2d7/0x580 [ 107.253191][ T5673] vhci_release+0x73/0xc0 [ 107.257503][ T5673] ? vhci_open+0x290/0x290 [ 107.261918][ T5673] __fput+0x234/0x930 [ 107.265891][ T5673] task_work_run+0x125/0x1a0 [ 107.270470][ T5673] do_exit+0x616/0x20a0 [ 107.274614][ T5673] ? put_task_struct+0x80/0x80 [ 107.279367][ T5673] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 107.285336][ T5673] ? lock_chain_count+0x20/0x20 [ 107.290178][ T5673] do_group_exit+0x12e/0x300 [ 107.294763][ T5673] __x64_sys_exit_group+0x3b/0x40 [ 107.299777][ T5673] do_syscall_64+0x4c/0xa0 [ 107.304173][ T5673] ? clear_bhb_loop+0x15/0x70 [ 107.308834][ T5673] ? clear_bhb_loop+0x15/0x70 [ 107.313490][ T5673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.319375][ T5673] RIP: 0033:0x7fdc7a446969 [ 107.323778][ T5673] Code: Unable to access opcode bytes at RIP 0x7fdc7a44693f. [ 107.331120][ T5673] RSP: 002b:00007ffd4b5ef618 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 107.339513][ T5673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc7a446969 [ 107.347462][ T5673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 107.355420][ T5673] RBP: 00007fdc7a4a68f0 R08: 00007ffd4b5ed3b7 R09: 0000000000000003 [ 107.363376][ T5673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.371324][ T5673] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd4b5ef7d0 [ 107.379278][ T5673] [ 109.712972][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.967480][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.017470][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.076415][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.749513][ T9] device hsr_slave_0 left promiscuous mode [ 110.760589][ T9] device hsr_slave_1 left promiscuous mode [ 110.771345][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.778754][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.793973][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.803090][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.810729][ T9] device bridge_slave_1 left promiscuous mode [ 110.816880][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.838698][ T9] device bridge_slave_0 left promiscuous mode [ 110.847634][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.861633][ T9] device veth1_macvtap left promiscuous mode [ 110.867796][ T9] device veth0_macvtap left promiscuous mode [ 110.876406][ T9] device veth1_vlan left promiscuous mode [ 110.882271][ T9] device veth0_vlan left promiscuous mode [ 111.054906][ T9] team0 (unregistering): Port device team_slave_1 removed [ 111.072964][ T9] team0 (unregistering): Port device team_slave_0 removed [ 111.085571][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.098702][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.154084][ T9] bond0 (unregistering): Released all slaves