last executing test programs: 38.59061198s ago: executing program 4 (id=239): fsopen(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 36.868353597s ago: executing program 4 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/47, &(0x7f0000000180)=0x2f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) ioprio_set$pid(0x2, 0x0, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 36.507237017s ago: executing program 4 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = fsmount(r2, 0x0, 0x8c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000000)=0x8, 0x4) 36.121794618s ago: executing program 4 (id=250): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, 0xfffffffffffffffe, &(0x7f0000000380)='\x03\x18\xf5]\xf5cP\xed\x1e\x19\xc0m\'\x19\xee\x80A\x03\xabb\x81\xb8\f\x10E\x17\x18\x0f\xf2\xfb\xa5j\xacO\xd8+:\n\xf3\xee\xf7e\x82=\xcd)\x83Q\xa7;\xcd\xe6\xcf\xcdg\xd8H\xc7\x9a5\x10iZp\x14X\xa7\xcb\xba#7\xc5\xc2wth:r%lm\x14\x02\x12?\xca&\xbc\xd7r\xc1K\xb2\x14\x16q\xc3\x93\x05v\xc4\x83`\\}\xb8\xc4\x02\x00\x80Yw@\x8c7$\xfe\xa5\xd3\xab\tJ\xde8\xa1\xfd\xb0\t\xae|^\xbe\xa3-[W\xb4\xd8=t\xbcI\x96\x95\a\xab\xad\x98\r\xdf!A\x1fT*\xa2$R\xd5t\xa2\x82}\xcaq\x17\xc1\x9b\x1d\x05e\xe5*\x92\x06\x0e*\xbct iZ\xbfF\xe8\xbe4\"nR\x18,\xa6\xe3\x8f\xf0%\xcd\x80\x83\x89e\xf8\xf0\xc3xx\x1cc\xdb\x1b<\xa5\xbf\xa5\xe7\xe6\x8e\xcd\x16\x19a\x1c[\x16\x9a\xb2\xea\xec\xf2\x8cv=\xf3ZRn\xcd\x9b\x98\xec\xa2\x83\x97\xee[\xd3') write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, 0x0, 0x0, 0x42428, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000001b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xfc, 0x90, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x4, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x405, 0x2, 0x3, 0x5, 0xe3, 0xfc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x10, 0xf7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0x2, 0x0, {0x7, 0x25, 0x1, 0xc, 0xfd, 0xb96c}}}}}}}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 33.670334145s ago: executing program 4 (id=258): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') lseek(r3, 0x3, 0x0) 33.011941593s ago: executing program 4 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000dfc000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {0x1}, {0x9, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x1, 0x3, 0x7, 0x7, 0x5, 0x3, 0x4, 0x4, 0x34739c43, 0xf7b, 0x2, 0x3d, 0x6, 0x3, 0x5, 0x5, 0x2, 0x30f6, 0x0, 0xe4, 0x9, 0xfffffff9, 0x9, 0x4, 0xe, 0x0, 0x6, 0xd, 0x2, 0x8, 0x5, 0x8, 0x3, 0x3, 0x5, 0x1, 0x9, 0x6, 0xc, 0x9, 0x8, 0x9, 0x6, 0xc7, 0x9, 0x4000007, 0xbf, 0x1e, 0x5, 0xb, 0x5, 0x2b18, 0x8, 0x4, 0x4, 0x2, 0x8, 0x9, 0x6, 0x56a0, 0x172d, 0x5, 0x40, 0x2, 0xc, 0x5, 0x7, 0x914d, 0x1ff, 0x8275, 0x7, 0x7, 0x2, 0x7fffffff, 0x3, 0x2, 0xac, 0x1, 0x7, 0xff, 0x7ff, 0x4, 0xcf1, 0x4, 0x8, 0x81, 0x9, 0x800, 0x7, 0x6, 0xffc, 0x0, 0x2, 0x1, 0x5, 0x6, 0x2, 0x9, 0x911, 0x0, 0x1, 0xc, 0x73, 0x1, 0x9, 0x8, 0x6, 0x3, 0xd, 0xffffffff, 0x3, 0x8, 0xfff, 0x1, 0x0, 0x0, 0x6, 0x3, 0x1, 0x9, 0x9, 0x4, 0xfffffffa, 0x0, 0x0, 0xca, 0x8, 0xf, 0xa0000000, 0x3, 0x1000, 0x2, 0xf, 0x8000, 0x8, 0x6b14a661, 0x10, 0x4, 0x1, 0x6, 0x3, 0x7, 0xfa48, 0x5, 0xfffffff9, 0x2, 0x0, 0x98d, 0x2, 0xc, 0x2, 0xa01b, 0xffff, 0x1000, 0x4, 0x7, 0x1000, 0x6, 0x1, 0x6, 0xfffffff9, 0x50, 0x7, 0x3ff, 0xe0, 0x80, 0x9, 0x200, 0x5, 0x6, 0x0, 0x5, 0xfff, 0x40000000, 0x80000000, 0x40, 0xf, 0xffffffff, 0x3ff, 0x8, 0x0, 0x4d1b043e, 0xf51, 0x1, 0x8, 0x3, 0x6, 0x6, 0x7, 0x8, 0xbb71, 0x9, 0x100, 0x9, 0x7, 0x1800, 0x9, 0x8000, 0x0, 0x1, 0x5, 0xf601, 0xa2, 0x2, 0x4, 0x1000, 0x2, 0xb, 0x8, 0x0, 0x3c6, 0x3, 0x3, 0x6, 0xffffffd0, 0x62cd, 0x4a52, 0x580f, 0x4, 0x0, 0xc8, 0x3, 0xfffffffa, 0x1, 0x1, 0x2ff, 0x9de, 0xfff, 0x1, 0x4, 0xfffffffd, 0x200, 0x60, 0x9, 0xd, 0x5, 0x3, 0x1, 0x6, 0x2000, 0x0, 0x3, 0x7, 0x0, 0x104, 0x8, 0x9, 0x6480b82a, 0x0, 0x8, 0x3, 0xfffffff6, 0xacd, 0x4, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 33.011744233s ago: executing program 32 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000dfc000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {0x1}, {0x9, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x1, 0x3, 0x7, 0x7, 0x5, 0x3, 0x4, 0x4, 0x34739c43, 0xf7b, 0x2, 0x3d, 0x6, 0x3, 0x5, 0x5, 0x2, 0x30f6, 0x0, 0xe4, 0x9, 0xfffffff9, 0x9, 0x4, 0xe, 0x0, 0x6, 0xd, 0x2, 0x8, 0x5, 0x8, 0x3, 0x3, 0x5, 0x1, 0x9, 0x6, 0xc, 0x9, 0x8, 0x9, 0x6, 0xc7, 0x9, 0x4000007, 0xbf, 0x1e, 0x5, 0xb, 0x5, 0x2b18, 0x8, 0x4, 0x4, 0x2, 0x8, 0x9, 0x6, 0x56a0, 0x172d, 0x5, 0x40, 0x2, 0xc, 0x5, 0x7, 0x914d, 0x1ff, 0x8275, 0x7, 0x7, 0x2, 0x7fffffff, 0x3, 0x2, 0xac, 0x1, 0x7, 0xff, 0x7ff, 0x4, 0xcf1, 0x4, 0x8, 0x81, 0x9, 0x800, 0x7, 0x6, 0xffc, 0x0, 0x2, 0x1, 0x5, 0x6, 0x2, 0x9, 0x911, 0x0, 0x1, 0xc, 0x73, 0x1, 0x9, 0x8, 0x6, 0x3, 0xd, 0xffffffff, 0x3, 0x8, 0xfff, 0x1, 0x0, 0x0, 0x6, 0x3, 0x1, 0x9, 0x9, 0x4, 0xfffffffa, 0x0, 0x0, 0xca, 0x8, 0xf, 0xa0000000, 0x3, 0x1000, 0x2, 0xf, 0x8000, 0x8, 0x6b14a661, 0x10, 0x4, 0x1, 0x6, 0x3, 0x7, 0xfa48, 0x5, 0xfffffff9, 0x2, 0x0, 0x98d, 0x2, 0xc, 0x2, 0xa01b, 0xffff, 0x1000, 0x4, 0x7, 0x1000, 0x6, 0x1, 0x6, 0xfffffff9, 0x50, 0x7, 0x3ff, 0xe0, 0x80, 0x9, 0x200, 0x5, 0x6, 0x0, 0x5, 0xfff, 0x40000000, 0x80000000, 0x40, 0xf, 0xffffffff, 0x3ff, 0x8, 0x0, 0x4d1b043e, 0xf51, 0x1, 0x8, 0x3, 0x6, 0x6, 0x7, 0x8, 0xbb71, 0x9, 0x100, 0x9, 0x7, 0x1800, 0x9, 0x8000, 0x0, 0x1, 0x5, 0xf601, 0xa2, 0x2, 0x4, 0x1000, 0x2, 0xb, 0x8, 0x0, 0x3c6, 0x3, 0x3, 0x6, 0xffffffd0, 0x62cd, 0x4a52, 0x580f, 0x4, 0x0, 0xc8, 0x3, 0xfffffffa, 0x1, 0x1, 0x2ff, 0x9de, 0xfff, 0x1, 0x4, 0xfffffffd, 0x200, 0x60, 0x9, 0xd, 0x5, 0x3, 0x1, 0x6, 0x2000, 0x0, 0x3, 0x7, 0x0, 0x104, 0x8, 0x9, 0x6480b82a, 0x0, 0x8, 0x3, 0xfffffff6, 0xacd, 0x4, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 14.045228684s ago: executing program 2 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x55d6, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54815}, 0x4880) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.786603879s ago: executing program 2 (id=331): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000580)={[{@fat=@gid}, {@shortname_lower}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x46}, 0x28) 6.121562242s ago: executing program 0 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 5.986643016s ago: executing program 5 (id=358): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80000, &(0x7f0000000700)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.050245441s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) 4.597142834s ago: executing program 5 (id=363): syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x309100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.522861876s ago: executing program 5 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.431028518s ago: executing program 3 (id=366): socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$video4linux(0x0, 0x20, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) 4.38501924s ago: executing program 1 (id=367): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 4.088508028s ago: executing program 0 (id=368): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 4.012271s ago: executing program 1 (id=369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 3.66364115s ago: executing program 1 (id=370): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000000)={[{@debug}, {@delalloc}, {@nodioread_nolock}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x18, r6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 3.614671541s ago: executing program 5 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a942, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffffffffffdae, 0x2, {0x87ff3c693e397323, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.554340333s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x200000, 0x25dfd3fe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xcc881}, 0x4048806) 3.448983496s ago: executing program 2 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 2.804811614s ago: executing program 0 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120660002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.661461187s ago: executing program 1 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.661335387s ago: executing program 3 (id=376): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.541524811s ago: executing program 2 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0}) syz_open_dev$sndctrl(0x0, 0x0, 0x121000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.881301849s ago: executing program 5 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 1.785141681s ago: executing program 5 (id=379): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.778558491s ago: executing program 3 (id=380): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket(0x22, 0x2, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 1.441026671s ago: executing program 1 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 1.369550263s ago: executing program 0 (id=382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 951.905664ms ago: executing program 2 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r3) 656.569122ms ago: executing program 3 (id=384): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) unshare(0x22020600) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000040)=0x6, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 547.930095ms ago: executing program 1 (id=385): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 191.019525ms ago: executing program 0 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) writev(r1, &(0x7f0000000b00)=[{0x0}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000001080)={0x6, 0x3, 0x9, 0x7}) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 70.315838ms ago: executing program 2 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x38130d1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 0s ago: executing program 3 (id=388): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) setregid(0x0, 0x0) syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xe3, 0xc9}}}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 28.503786][ T4317] cgroup: Unknown subsys name 'net' [ 28.751483][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.005406][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.695255][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.696805][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.698537][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.700299][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.701794][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.703106][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.704391][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.706303][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.719072][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.720677][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.722850][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.724485][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.725978][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.727780][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.729704][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.732350][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.738744][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.740919][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.745799][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.747634][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.749388][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.750830][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.752248][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.753831][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.764870][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.767080][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.768532][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.770595][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.772072][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.773613][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.791366][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.844580][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.845884][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.847483][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.851121][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.852418][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.854032][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.883026][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.885725][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.895462][ T4329] team0: Port device team_slave_0 added [ 29.897523][ T4329] team0: Port device team_slave_1 added [ 29.914765][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.916111][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.921912][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.925648][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.926894][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.932168][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.937247][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 29.991448][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.029044][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.074655][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.076066][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.077644][ T4342] device bridge_slave_0 entered promiscuous mode [ 30.080960][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.083178][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.084344][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.085921][ T4342] device bridge_slave_1 entered promiscuous mode [ 30.116670][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.122610][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.124143][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.126909][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.149288][ T4342] team0: Port device team_slave_0 added [ 30.159604][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.160938][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.162634][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.164872][ T4342] team0: Port device team_slave_1 added [ 30.175067][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.176181][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.181164][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.183235][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.184494][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.186104][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.193190][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.194531][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.199275][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.213024][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.214321][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.215857][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.219289][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220557][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.222078][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.227278][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.228542][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.230435][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.235735][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.237452][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.238724][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.240641][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.245098][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.247493][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.252174][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.320009][ T4342] device hsr_slave_0 entered promiscuous mode [ 30.369166][ T4342] device hsr_slave_1 entered promiscuous mode [ 30.408982][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.410369][ T4342] Cannot create hsr debugfs directory [ 30.416146][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.424341][ T4330] team0: Port device team_slave_0 added [ 30.426284][ T4331] team0: Port device team_slave_0 added [ 30.428110][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.434232][ T4330] team0: Port device team_slave_1 added [ 30.435934][ T4331] team0: Port device team_slave_1 added [ 30.442195][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.499820][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.550198][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.595146][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.596327][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.601218][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.604645][ T4339] team0: Port device team_slave_0 added [ 30.606495][ T4339] team0: Port device team_slave_1 added [ 30.609827][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.658488][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.659978][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.664282][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.666864][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.668068][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.673154][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.675463][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.676763][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.681681][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.686024][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.687227][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.691814][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.694835][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.695990][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.700839][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.750654][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.789058][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.838958][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.840265][ T4331] Cannot create hsr debugfs directory [ 30.912183][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.949065][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.998995][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.000403][ T4330] Cannot create hsr debugfs directory [ 31.050049][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.089054][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.128902][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.130178][ T4339] Cannot create hsr debugfs directory [ 31.189581][ T4342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.210807][ T4342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.255792][ T4342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.310082][ T4342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.393136][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.413113][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.441298][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.445223][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.490456][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.545191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.547169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.553867][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.562555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.564449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.565988][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.567216][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.568829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.571886][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.606620][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.650202][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.690236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.693039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.694504][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.695855][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.697280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.699894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.706819][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.750029][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.759478][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 31.760636][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 31.761714][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 31.810390][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.839073][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 31.839101][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 31.855606][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.890553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.892299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.894023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.900045][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.901825][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.941583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.943595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.954212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.955878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.957730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.959832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.966379][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.968722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.970572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.981411][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.985597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.987555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.990675][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.991862][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.993339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.003808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.005654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.007116][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.008278][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.014832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.024362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.026207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.027883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.037395][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.042561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.055904][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.061830][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.066619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.068556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.070992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.072814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.078150][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.080238][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.083860][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.086596][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.088205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.090503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.091992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.094523][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.097886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.103608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.105232][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.106456][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.108099][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.110429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.114872][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.125496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.127032][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.128431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.130467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.136797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.138453][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.139863][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.153316][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.156056][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.157843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.159594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.161149][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.162394][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.163821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.165455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.166990][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.168126][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.171181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.173001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.174765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.176629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.178245][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.180201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.189499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.191154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.192749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.194545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.196239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.198496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.207865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.210661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.217362][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.219661][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.231785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.233375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.234962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.236842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.238430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.242792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.244533][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.246024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.247683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.249343][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.250758][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.252258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.253883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.255904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.257355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.267327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.269145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.270787][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.271973][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.273322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.274933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.282754][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.287484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.289287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.290610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.291960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.296201][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.306784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.308631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.313682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.315302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.317252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.320224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.321755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.323348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.327345][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.330068][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.333141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.334554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.336381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.337803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.340412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.351714][ T4329] device veth0_vlan entered promiscuous mode [ 32.355809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.357584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.375312][ T4342] device veth0_vlan entered promiscuous mode [ 32.377825][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.379788][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.381821][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.383308][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.386888][ T4329] device veth1_vlan entered promiscuous mode [ 32.395190][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.396764][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.398086][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.401460][ T4342] device veth1_vlan entered promiscuous mode [ 32.408549][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.421631][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.423495][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.425043][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.426557][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.428147][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.441991][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.443677][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.446412][ T4342] device veth0_macvtap entered promiscuous mode [ 32.450614][ T4342] device veth1_macvtap entered promiscuous mode [ 32.454903][ T4329] device veth0_macvtap entered promiscuous mode [ 32.459299][ T4329] device veth1_macvtap entered promiscuous mode [ 32.465481][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.467050][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.468442][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.471360][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.477267][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.478699][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.485006][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.487586][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.496177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.497945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.499900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.501247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.502548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.504339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.513712][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.515476][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.517525][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.519867][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.523050][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.524509][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525987][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.527427][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.533325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.535063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.536740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.538370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.550073][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.552240][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.554098][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.556369][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.557703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.560508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.571633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.573329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.575222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.576745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.582378][ T4342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.583867][ T4342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585490][ T4342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587133][ T4342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.593266][ T4330] device veth0_vlan entered promiscuous mode [ 32.598691][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.600997][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.603854][ T4330] device veth1_vlan entered promiscuous mode [ 32.631806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.633596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.635113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.636688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.638415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.643675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.655833][ T4331] device veth0_vlan entered promiscuous mode [ 32.671252][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.672652][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.674791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.687595][ T4331] device veth1_vlan entered promiscuous mode [ 32.692555][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.694363][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.695995][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.702092][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.703431][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.708000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.709805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.711725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.722301][ T4330] device veth0_macvtap entered promiscuous mode [ 32.725409][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.726331][ T4330] device veth1_macvtap entered promiscuous mode [ 32.726792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.733084][ T4331] device veth0_macvtap entered promiscuous mode [ 32.735655][ T4331] device veth1_macvtap entered promiscuous mode [ 32.737218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.739044][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.739449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.741798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.743419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.744936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.746662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.748287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.751766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.753362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.754909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.766973][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.768772][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.771404][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.773201][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.775613][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.777971][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.780134][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.781916][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.783799][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.786291][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.790131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.791810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.793430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.795110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.796706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.798283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.803706][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.805171][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806761][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.808214][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.814401][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.816048][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.817689][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.819941][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.821629][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.823324][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.825729][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.827331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.829228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.830625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.832159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.839419][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.841253][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.843835][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.845531][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.853916][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.855582][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.863453][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.895141][ T4339] device veth0_vlan entered promiscuous mode [ 32.897323][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.900154][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.916708][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.918263][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.921264][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.922856][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.957112][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.961759][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.963132][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.964416][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.969999][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.971773][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.991513][ T4339] device veth1_vlan entered promiscuous mode [ 33.025706][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.027214][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.042995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.046234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.049341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.338378][ T4339] device veth0_macvtap entered promiscuous mode [ 33.344380][ T4339] device veth1_macvtap entered promiscuous mode [ 33.351034][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353035][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.354974][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.356856][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.358810][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.363979][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.365879][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.367923][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.371731][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.374483][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.376383][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.378095][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.380686][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.382470][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.385548][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.391239][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.393899][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.396412][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.401010][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.402761][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.405088][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.406916][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.408606][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.414676][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.417898][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419808][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.421565][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423313][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.425926][ T464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.427536][ T464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.438144][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.839047][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 33.840215][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 33.841259][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 33.919050][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 33.921133][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.927105][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.929124][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 33.953906][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.959977][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.961530][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.962946][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.371451][ T4432] process 'syz.4.5' launched '/dev/fd/3' with NULL argv: empty string added [ 34.428249][ T4435] loop2: detected capacity change from 0 to 512 [ 34.471577][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.653251][ T4445] loop4: detected capacity change from 0 to 128 [ 34.945332][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 35.075803][ T4448] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 35.492164][ T4448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 35.919193][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 35.920329][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 35.921408][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 36.049457][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 36.054283][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 36.515656][ T4476] syz.0.24 sent an empty control message without MSG_MORE. [ 36.900705][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.902944][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.904221][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.906130][ T4490] device bridge_slave_0 left promiscuous mode [ 36.907964][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.985479][ T4490] device bridge_slave_1 left promiscuous mode [ 36.986768][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.581551][ T4505] ======================================================= [ 37.581551][ T4505] WARNING: The mand mount option has been deprecated and [ 37.581551][ T4505] and is ignored by this kernel. Remove the mand [ 37.581551][ T4505] option from the mount to silence this warning. [ 37.581551][ T4505] ======================================================= [ 37.786421][ T4490] bond0: (slave bond_slave_0): Releasing backup interface [ 37.922830][ T4490] bond0: (slave bond_slave_1): Releasing backup interface [ 38.007391][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 38.008583][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 38.010160][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 38.278526][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 38.391595][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 38.422737][ T4490] team0: Port device team_slave_0 removed [ 38.444766][ T4490] team0: Port device team_slave_1 removed [ 38.447049][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.448567][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.452023][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.453457][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.507028][ T4532] device syzkaller0 entered promiscuous mode [ 38.569644][ T4534] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 38.691275][ T4534] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 38.728566][ T4539] netlink: 'syz.2.42': attribute type 39 has an invalid length. [ 39.888850][ C1] sched: RT throttling activated [ 40.256302][ T4569] loop1: detected capacity change from 0 to 128 [ 40.765856][ T4569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.217279][ T4562] tipc: Enabling of bearer rejected, failed to enable media [ 41.320697][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 41.450057][ T27] audit: type=1326 audit(41.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.0.49" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc9781a8 code=0x0 [ 42.522161][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 42.955135][ T4602] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4331] was attempted by " [ 43.310117][ T4610] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 43.933192][ T4627] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 43.991266][ T4627] device gretap1 entered promiscuous mode [ 44.065357][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.067390][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.069477][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.071650][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.073309][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.075082][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.076688][ T4627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.078457][ T4627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.081594][ T4627] device macvlan2 entered promiscuous mode [ 44.498359][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.525209][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.536023][ T4647] mmap: syz.3.68 (4647): VmData 175771648 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 44.543652][ T4650] loop4: detected capacity change from 0 to 512 [ 44.559579][ T4650] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.71: iget: bad i_size value: 38620345925642 [ 44.564141][ T4650] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.71: couldn't read orphan inode 15 (err -117) [ 44.577089][ T4650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.580629][ T4644] md: serialize_policy is only effective for raid1 [ 44.713159][ T4334] Bluetooth: hci0: unexpected event 0x48 length: 39 > 3 [ 44.713180][ T4334] Bluetooth: hci0: wrong event for mode 0 [ 45.207611][ T9] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 45.211066][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.213722][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.213722][ T9] [ 45.215964][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 45.235820][ T9] EXT4-fs (loop4): Free/Dirty block details [ 45.239184][ T9] EXT4-fs (loop4): free_blocks=0 [ 45.242453][ T9] EXT4-fs (loop4): dirty_blocks=16008 [ 45.243407][ T9] EXT4-fs (loop4): Block reservation details [ 45.244462][ T9] EXT4-fs (loop4): i_reserved_data_blocks=16008 [ 45.262389][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 45.297382][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.298974][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.476853][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.478631][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.579765][ T4677] loop4: detected capacity change from 0 to 256 [ 46.047837][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.063387][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.420315][ T4668] ceph: No mds server is up or the cluster is laggy [ 46.423832][ T3902] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 46.658013][ T4645] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.660130][ T4645] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.661982][ T4645] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.663564][ T4645] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.824930][ T4661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.826496][ T4661] IPv6: NLM_F_CREATE should be set when creating new route [ 46.827729][ T4661] IPv6: NLM_F_CREATE should be set when creating new route [ 46.831579][ T4662] device bridge1 entered promiscuous mode [ 46.881866][ T4690] device syzkaller0 entered promiscuous mode [ 46.931790][ T4704] loop1: detected capacity change from 0 to 8192 [ 46.935933][ T4704] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 49.251808][ T4334] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 49.253439][ T4334] Bluetooth: hci0: Injecting HCI hardware error event [ 49.255604][ T4332] Bluetooth: hci0: hardware error 0x00 [ 49.912676][ T4738] netlink: 'syz.1.92': attribute type 2 has an invalid length. [ 49.914318][ T4738] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 50.176773][ T4738] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.92'. [ 50.223366][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 50.297219][ T4742] loop4: detected capacity change from 0 to 1024 [ 50.315033][ T4742] JBD2: no valid journal superblock found [ 50.321366][ T4742] EXT4-fs (loop4): error loading journal [ 50.362403][ T4742] loop4: detected capacity change from 0 to 256 [ 50.373318][ T4742] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 50.953348][ T4757] device syzkaller0 entered promiscuous mode [ 50.987594][ T4759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.98'. [ 51.060763][ T4757] tipc: Started in network mode [ 51.061826][ T4757] tipc: Node identity 82201f13eb6c, cluster identity 4711 [ 51.063224][ T4757] tipc: Enabled bearer , priority 0 [ 51.065913][ T4754] tipc: Resetting bearer [ 51.096011][ T27] audit: type=1326 audit(51.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.0.100" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc9781a8 code=0x0 [ 51.180378][ T4754] tipc: Disabling bearer [ 53.338932][ T4790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 53.919017][ T4332] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 54.834073][ T4797] loop1: detected capacity change from 0 to 764 [ 54.892696][ T4801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.109'. [ 54.922789][ T4321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.253128][ T4808] device syzkaller0 entered promiscuous mode [ 55.722239][ T4818] loop3: detected capacity change from 0 to 2048 [ 55.733256][ T4818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.891519][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 56.897817][ T4840] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.919236][ T112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.926887][ T4840] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 56.942937][ T4844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 57.361046][ T22] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.889504][ T4867] loop4: detected capacity change from 0 to 2048 [ 57.900100][ T4868] loop2: detected capacity change from 0 to 512 [ 57.910418][ T4865] device syzkaller0 entered promiscuous mode [ 57.926741][ T4867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.948042][ T4868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.030241][ T4881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.034161][ T4881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.037068][ T4881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.038775][ T4881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.053834][ T4868] EXT4-fs warning (device loop2): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 58.365746][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 58.407801][ T4887] binder: 4886:4887 tried to acquire reference to desc 0, got 1 instead [ 58.423675][ T4887] binder_alloc: 4886: pid 4886 spamming oneway? 2 buffers allocated for a total size of 5120 [ 58.453515][ T112] binder: release 4886:4887 transaction 7 out, still active [ 58.455418][ T112] binder: undelivered TRANSACTION_COMPLETE [ 58.456584][ T112] binder: undelivered TRANSACTION_COMPLETE [ 58.457622][ T112] binder: undelivered TRANSACTION_COMPLETE [ 58.545291][ T4898] loop2: detected capacity change from 0 to 1024 [ 58.547705][ T4898] EXT4-fs: Ignoring removed bh option [ 58.548745][ T4898] EXT4-fs: Ignoring removed oldalloc option [ 58.550057][ T4898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.557021][ T4898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.971536][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 59.110079][ T4898] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 59.111756][ T4898] System zones: 0-1, 3-36 [ 59.215325][ T4898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.580064][ T4378] binder: undelivered transaction 6, process died. [ 59.581371][ T4378] binder: undelivered transaction 5, process died. [ 59.582610][ T4378] binder: send failed reply for transaction 7, target dead [ 60.150863][ T4915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.139'. [ 60.799347][ T4893] netlink: 'syz.1.137': attribute type 2 has an invalid length. [ 60.828449][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 60.890098][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.922328][ T4919] loop0: detected capacity change from 0 to 256 [ 62.124081][ T4919] tipc: Started in network mode [ 62.125094][ T4919] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 62.126422][ T4919] tipc: Enabled bearer , priority 0 [ 63.408609][ T112] tipc: Node number set to 43690 [ 64.120590][ T4953] loop2: detected capacity change from 0 to 1764 [ 64.480598][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482006][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.426786][ T4972] loop1: detected capacity change from 0 to 4096 [ 65.494949][ T4978] loop0: detected capacity change from 0 to 128 [ 65.499242][ T4972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.520642][ T4978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.531255][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 65.601830][ T4974] loop4: detected capacity change from 0 to 40427 [ 65.622913][ T4974] F2FS-fs (loop4): invalid crc value [ 65.625767][ T4974] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.662109][ T4974] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.666034][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 66.054385][ T4339] syz-executor: attempt to access beyond end of device [ 66.054385][ T4339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.297273][ T5014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.399301][ T5014] device bond_slave_0 entered promiscuous mode [ 67.400656][ T5014] device bond_slave_1 entered promiscuous mode [ 67.402338][ T5014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.405275][ T5014] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 67.414849][ T5016] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 67.510887][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 67.907199][ T5033] loop4: detected capacity change from 0 to 512 [ 67.940603][ T5033] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.175: iget: bad i_size value: 38620345925642 [ 67.945463][ T5033] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.175: couldn't read orphan inode 15 (err -117) [ 67.958928][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.000361][ T5039] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 68.011998][ T5041] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.028074][ T5039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.054332][ T5039] bond2: (slave gretap1): making interface the new active one [ 68.056927][ T5039] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 68.058432][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 68.134871][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 68.164324][ T5048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.169483][ T5033] EXT4-fs (loop4): shut down requested (1) [ 68.203202][ T5048] device bond1 entered promiscuous mode [ 68.567160][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 68.572819][ T5048] device macvlan2 entered promiscuous mode [ 68.586912][ T5048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.167837][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 69.173477][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 69.175478][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 69.178194][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 69.180428][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 69.603586][ T14] cfg80211: failed to load regulatory.db [ 69.855531][ T5082] loop1: detected capacity change from 0 to 512 [ 69.893841][ T5082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.930726][ T5082] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.190: corrupted inode contents [ 69.960812][ T5082] EXT4-fs (loop1): Remounting filesystem read-only [ 69.962067][ T5082] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.190: mark_inode_dirty error [ 69.984797][ T5082] EXT4-fs (loop1): Remounting filesystem read-only [ 69.986045][ T5082] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.190: corrupted inode contents [ 70.014013][ T5082] EXT4-fs (loop1): Remounting filesystem read-only [ 70.015259][ T5082] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.190: mark_inode_dirty error [ 70.019084][ T5082] EXT4-fs (loop1): Remounting filesystem read-only [ 70.076247][ T5089] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 70.084046][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 70.779292][ T5115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 71.462617][ T5127] loop2: detected capacity change from 0 to 512 [ 71.791979][ T5127] EXT4-fs (loop2): can't read group descriptor 0 [ 71.845887][ T5127] netlink: 'syz.2.202': attribute type 13 has an invalid length. [ 71.911715][ T5127] Bluetooth: MGMT ver 1.22 [ 72.478332][ T5135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'. [ 72.518963][ T5144] tipc: Started in network mode [ 72.520876][ T5144] tipc: Node identity 2007ff, cluster identity 4711 [ 72.526815][ T5144] tipc: Node number set to 2099199 [ 72.571082][ T5148] binder: 5146:5148 tried to acquire reference to desc 0, got 1 instead [ 72.575021][ T5148] binder: 5146:5148 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.577309][ T5148] binder: 5148 RLIMIT_NICE not set [ 72.578193][ T5148] binder: 5148 RLIMIT_NICE not set [ 72.580111][ T5148] binder: 5148 RLIMIT_NICE not set [ 72.581194][ T5148] binder: 5146:5148 got transaction with invalid fd, -1 [ 72.582494][ T5148] binder: 5148:5146 translate fd failed [ 72.583612][ T5148] binder: 5146:5148 transaction reply to 5146:5148 failed 13/29201/-9, size 88-24 line 3432 [ 72.585783][ T5148] binder: send failed reply for transaction 12 to 5146:5148 [ 72.595423][ T14] binder: undelivered TRANSACTION_COMPLETE [ 72.596758][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.598140][ T14] binder: undelivered TRANSACTION_ERROR: 29190 [ 73.052412][ T5160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.212'. [ 73.064896][ T5160] device ip6gre1 entered promiscuous mode [ 73.084321][ T5155] nvme_fabrics: missing parameter 'transport=%s' [ 73.085753][ T5155] nvme_fabrics: missing parameter 'nqn=%s' [ 73.169129][ T5167] netlink: 'syz.0.212': attribute type 6 has an invalid length. [ 73.170699][ T5167] netlink: 72 bytes leftover after parsing attributes in process `syz.0.212'. [ 74.700308][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 75.153539][ T5203] device bridge_slave_0 left promiscuous mode [ 75.154952][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.180202][ T5203] device bridge_slave_1 left promiscuous mode [ 75.181521][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.220139][ T5203] bond0: (slave bond_slave_0): Releasing backup interface [ 75.269816][ T5203] bond0: (slave bond_slave_1): Releasing backup interface [ 75.311432][ T5203] team0: Port device team_slave_0 removed [ 75.315585][ T5203] team0: Port device team_slave_1 removed [ 75.317169][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.319421][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.321276][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 75.334735][ T5208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.336827][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 75.338475][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 75.341647][ T5210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.344367][ T5210] bond1: (slave bond0): Enslaving as an active interface with a down link [ 75.346402][ T5211] device bond3 entered promiscuous mode [ 76.833815][ T5245] Invalid ELF header magic: != ELF [ 77.255755][ T5251] capability: warning: `syz.2.237' uses 32-bit capabilities (legacy support in use) [ 78.006888][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 78.018776][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 78.020740][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 78.022663][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 78.024384][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 79.453013][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 79.454767][ T5266] netlink: 18 bytes leftover after parsing attributes in process `syz.0.241'. [ 79.534191][ T5273] overlayfs: failed to clone upperpath [ 79.682577][ T5277] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.735062][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 79.738389][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.052140][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.053550][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.196822][ T5296] loop1: detected capacity change from 0 to 1024 [ 80.198608][ T5296] EXT4-fs: Ignoring removed bh option [ 80.199729][ T5296] EXT4-fs: Ignoring removed oldalloc option [ 80.200827][ T5296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.204650][ T5296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.448789][ T5296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 80.450476][ T5296] System zones: 0-1, 3-36 [ 80.465021][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.073923][ T5294] loop4: detected capacity change from 0 to 4096 [ 81.213912][ T5294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.254467][ T5294] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 81.261238][ T5294] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 81.271487][ T5294] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.250: Failed to acquire dquot type 1 [ 81.291191][ T5294] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 81.313896][ T5300] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 81.325172][ T5300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.327936][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 81.383087][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.384952][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.390288][ T5301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.396240][ T5301] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 81.425101][ T5301] bond4: (slave vti0): Error -95 calling set_mac_address [ 81.439606][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 81.810096][ T5305] device gretap2 entered promiscuous mode [ 81.817717][ T5305] bond4: (slave gretap2): making interface the new active one [ 81.822975][ T5305] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 81.832026][ T5306] device macvlan3 entered promiscuous mode [ 81.833628][ T5306] device bond4 entered promiscuous mode [ 81.834983][ T5306] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 81.871910][ T5306] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 81.912784][ T5306] device bond4 left promiscuous mode [ 81.975516][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.019050][ T5307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.453019][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.454801][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.462988][ T5327] device bridge_slave_0 left promiscuous mode [ 82.464082][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.519877][ T5327] device bridge_slave_1 left promiscuous mode [ 82.521867][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.560292][ T5327] bond0: (slave bond_slave_0): Releasing backup interface [ 82.601957][ T5327] device bond_slave_0 left promiscuous mode [ 82.606379][ T5327] bond0: (slave bond_slave_1): Releasing backup interface [ 82.622936][ T5327] device bond_slave_1 left promiscuous mode [ 82.635230][ T5327] team0: Port device team_slave_0 removed [ 82.643943][ T5327] team0: Port device team_slave_1 removed [ 82.645282][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.646951][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.649542][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.650885][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.655697][ T5327] bond1: (slave macvlan2): Removing an active aggregator [ 82.656992][ T5327] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.659168][ T5327] bond1: (slave macvlan2): Releasing backup interface [ 82.660369][ T5327] bond1: (slave macvlan2): the permanent HWaddr of slave - 86:3b:06:0b:0b:49 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 82.751963][ T5327] bond1: (slave ip6gretap1): Removing an active aggregator [ 82.758470][ T5327] bond1: (slave ip6gretap1): Releasing backup interface [ 82.805174][ T5327] bond2: (slave gretap1): Releasing active interface [ 82.843022][ T5327] bond4: (slave gretap2): Releasing active interface [ 82.883010][ T5329] bond1: option mode: unable to set because the bond device is up [ 82.893675][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 82.895315][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 83.088410][ T5334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.095637][ T5334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.099005][ T5334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.237944][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.240272][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.242029][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.243731][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.245246][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.246613][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.526192][ T5343] loop0: detected capacity change from 0 to 32768 [ 83.542175][ T5343] XFS (loop0): Mounting V5 Filesystem [ 83.553838][ T5343] XFS (loop0): Ending clean mount [ 83.557910][ T5343] XFS (loop0): Quotacheck needed: Please wait. [ 83.573755][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.582585][ T5343] XFS (loop0): Quotacheck: Done. [ 83.710117][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.029669][ T5338] chnl_net:caif_netlink_parms(): no params data found [ 84.061963][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.075851][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.077194][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.078836][ T5338] device bridge_slave_0 entered promiscuous mode [ 84.081884][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.083223][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.084830][ T5338] device bridge_slave_1 entered promiscuous mode [ 84.091537][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.094206][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.143151][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.148524][ T5338] team0: Port device team_slave_0 added [ 84.151029][ T5338] team0: Port device team_slave_1 added [ 84.156197][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.157404][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.164745][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.167149][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.168285][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.173370][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.230900][ T5338] device hsr_slave_0 entered promiscuous mode [ 84.269111][ T5338] device hsr_slave_1 entered promiscuous mode [ 84.311583][ T4329] XFS (loop0): Unmounting Filesystem [ 84.315229][ T5338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.316616][ T5338] Cannot create hsr debugfs directory [ 84.366513][ T5338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.429903][ T5338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.470103][ T5338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.779651][ T5338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.842791][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.846995][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.848753][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.851997][ T5338] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.854595][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.856524][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.858099][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.859317][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.870877][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.891030][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.892958][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.894528][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895773][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.897289][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.901506][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.903538][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.906022][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.071760][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.073620][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.075493][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.077328][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.079392][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.081252][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.083009][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.210645][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.278990][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 85.343413][ T5385] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 85.357438][ T5385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.368950][ T5386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.370317][ T5386] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 85.372594][ T5386] bond2: (slave vti0): Error -95 calling set_mac_address [ 85.404217][ T5387] device gretap1 entered promiscuous mode [ 85.406608][ T5387] bond2: (slave gretap1): making interface the new active one [ 85.408162][ T5387] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 85.414148][ T5385] device macvlan2 entered promiscuous mode [ 85.415621][ T5385] device bond2 entered promiscuous mode [ 85.416792][ T5385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.459972][ T5385] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 85.491992][ T5385] device bond2 left promiscuous mode [ 85.686659][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.688464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.691273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.143096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.145110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.152657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.154586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.158554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.163879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.214730][ T5338] device veth0_vlan entered promiscuous mode [ 86.222682][ T5338] device veth1_vlan entered promiscuous mode [ 86.236448][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.238297][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.241573][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.245013][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.286224][ T5338] device veth0_macvtap entered promiscuous mode [ 86.291452][ T5338] device veth1_macvtap entered promiscuous mode [ 86.297392][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.302522][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.304270][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.306097][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308641][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.310443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.312176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.313953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.315810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.322905][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.324984][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.326750][ T5338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.328626][ T5338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.331466][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.333349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.335136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.338485][ T5338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344046][ T5338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.345743][ T5338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.347270][ T5338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.435342][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.436935][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.438353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.488411][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.490012][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.491514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.838724][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 89.952300][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 90.074727][ T5501] binder: 5500:5501 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 90.077625][ T5501] binder: 5500:5501 got transaction to invalid handle, 1 [ 90.083438][ T5501] binder: 5501:5500 cannot find target node [ 90.084438][ T5501] binder: 5500:5501 transaction async to 0:0 failed 16/29201/-22, size 0-0 line 3062 [ 90.088958][ T4504] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.729070][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 90.769445][ T11] device hsr_slave_0 left promiscuous mode [ 90.820119][ T11] device hsr_slave_1 left promiscuous mode [ 91.139045][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.141114][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.147348][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.150814][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.155679][ T11] device bridge_slave_1 left promiscuous mode [ 91.157874][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.180906][ T11] device bridge_slave_0 left promiscuous mode [ 91.182292][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.280019][ T27] audit: type=1326 audit(91.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5519 comm="syz.3.284" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3781a8 code=0x0 [ 91.319844][ T11] device veth1_macvtap left promiscuous mode [ 91.321198][ T11] device veth0_macvtap left promiscuous mode [ 91.322322][ T11] device veth1_vlan left promiscuous mode [ 91.323552][ T11] device veth0_vlan left promiscuous mode [ 91.346299][ T5529] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 91.999561][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 93.208779][ C1] vcan0: j1939_tp_rxtimer: 0x000000008685b6aa: rx timeout, send abort [ 93.211347][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006808c533: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.710916][ C1] vcan0: j1939_tp_rxtimer: 0x000000008685b6aa: abort rx timeout. Force session deactivation [ 93.911509][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.070003][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.229408][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.429346][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.011065][ T11] bond0 (unregistering): Released all slaves [ 96.315305][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 97.794826][ T5568] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.796572][ T5568] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 98.246380][ T5584] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 98.303817][ T5584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 98.431714][ T5588] bond5: (slave dummy0): making interface the new active one [ 98.680689][ T5588] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 98.695360][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 98.772807][ T5603] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.903123][ T5589] loop0: detected capacity change from 0 to 40427 [ 98.913244][ T5589] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.914849][ T5589] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.924642][ T5589] F2FS-fs (loop0): invalid crc value [ 98.939153][ T5589] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.238210][ T5589] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.240106][ T5589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.737085][ T5644] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 99.765999][ T5644] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 99.827690][ T5644] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 100.460670][ T4332] Bluetooth: hci1: command 0x2016 tx timeout [ 100.514430][ T5670] loop1: detected capacity change from 0 to 512 [ 100.516165][ T5670] FAT-fs (loop1): Unrecognized mount option "Îw‚O{ûD‡Z¿shortname=lower" or missing value [ 100.643694][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 100.654835][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 101.888877][ T5710] loop1: detected capacity change from 0 to 32768 [ 102.494311][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 102.532439][ T5723] tipc: Started in network mode [ 102.534740][ T5723] tipc: Node identity 4aad730f7056, cluster identity 4711 [ 102.540621][ T5723] tipc: Enabled bearer , priority 0 [ 102.551568][ T5723] device syzkaller0 entered promiscuous mode [ 102.562255][ T5710] XFS (loop1): Mounting V5 Filesystem [ 102.877538][ T5710] XFS (loop1): Ending clean mount [ 102.884807][ T5710] XFS (loop1): Quotacheck needed: Please wait. [ 102.889962][ T5742] device syzkaller0 entered promiscuous mode [ 102.915263][ T5710] XFS (loop1): Quotacheck: Done. [ 103.010066][ T5741] tipc: Resetting bearer [ 103.015877][ T5722] tipc: Resetting bearer [ 103.334254][ T4330] XFS (loop1): Unmounting Filesystem [ 103.379633][ T5722] tipc: Disabling bearer [ 103.402192][ T5756] syz.0.330: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 103.405274][ T5756] CPU: 1 PID: 5756 Comm: syz.0.330 Not tainted syzkaller #0 [ 103.406457][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 103.408106][ T5756] Call trace: [ 103.408626][ T5756] dump_backtrace+0x1c4/0x1f0 [ 103.409487][ T5756] show_stack+0x2c/0x3c [ 103.410232][ T5756] __dump_stack+0x30/0x40 [ 103.411036][ T5756] dump_stack_lvl+0xf4/0x15c [ 103.411914][ T5756] dump_stack+0x1c/0x5c [ 103.412680][ T5756] warn_alloc+0x214/0x324 [ 103.413412][ T5756] __vmalloc_node_range+0x118/0xe70 [ 103.414331][ T5756] vmalloc+0x9c/0xd4 [ 103.415044][ T5756] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 103.416058][ T5756] dvb_demux_do_ioctl+0x3fc/0x4d8 [ 103.416976][ T5756] dvb_usercopy+0x248/0x45c [ 103.417809][ T5756] dvb_demux_ioctl+0x3c/0x54 [ 103.418598][ T5756] __arm64_sys_ioctl+0x14c/0x1c8 [ 103.419476][ T5756] invoke_syscall+0x98/0x290 [ 103.420239][ T5756] el0_svc_common+0x13c/0x258 [ 103.421047][ T5756] do_el0_svc+0x5c/0x134 [ 103.421778][ T5756] el0_svc+0x58/0x128 [ 103.422496][ T5756] el0t_64_sync_handler+0x84/0xf0 [ 103.423457][ T5756] el0t_64_sync+0x18c/0x190 [ 103.424811][ T5756] Mem-Info: [ 103.425416][ T5756] active_anon:23601 inactive_anon:0 isolated_anon:0 [ 103.425416][ T5756] active_file:22041 inactive_file:2497 isolated_file:0 [ 103.425416][ T5756] unevictable:768 dirty:305 writeback:0 [ 103.425416][ T5756] slab_reclaimable:19271 slab_unreclaimable:92292 [ 103.425416][ T5756] mapped:29218 shmem:19603 pagetables:618 [ 103.425416][ T5756] sec_pagetables:0 bounce:0 [ 103.425416][ T5756] kernel_misc_reclaimable:0 [ 103.425416][ T5756] free:1412894 free_pcp:4045 free_cma:7360 [ 103.435442][ T5756] Node 0 active_anon:94404kB inactive_anon:0kB active_file:88164kB inactive_file:9988kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116872kB dirty:1320kB writeback:0kB shmem:78412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8784kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no [ 103.448261][ T5756] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 103.453983][ T5756] lowmem_reserve[]: 0 0 3550 3550 3550 [ 103.455023][ T5756] Node 0 Normal free:2589344kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:94404kB inactive_anon:0kB active_file:88164kB inactive_file:9988kB unevictable:3072kB writepending:1320kB present:5242880kB managed:3639884kB mlocked:0kB bounce:0kB free_pcp:1720kB local_pcp:1348kB free_cma:0kB [ 103.469155][ T5756] lowmem_reserve[]: 0 0 0 0 0 [ 103.476812][ T5756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 103.479664][ T5756] Node 0 Normal: 409*4kB (UME) 755*8kB (UME) 516*16kB (UME) 208*32kB (UME) 254*64kB (UME) 72*128kB (UME) 14*256kB (UME) 5*512kB (ME) 4*1024kB (M) 3*2048kB (UM) 616*4096kB (UM) = 2587580kB [ 103.482926][ T5756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.484560][ T5756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 103.486163][ T5756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 103.487721][ T5756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 103.489836][ T5756] 44991 total pagecache pages [ 103.490677][ T5756] 0 pages in swap cache [ 103.491448][ T5756] Free swap = 124740kB [ 103.492185][ T5756] Total swap = 124996kB [ 103.492929][ T5756] 2097152 pages RAM [ 103.493615][ T5756] 0 pages HighMem/MovableOnly [ 103.494410][ T5756] 417133 pages reserved [ 103.495136][ T5756] 8192 pages cma reserved [ 103.495824][ T5756] 0 pages hwpoisoned [ 104.235263][ T5769] loop2: detected capacity change from 0 to 256 [ 104.930112][ T5786] syz.5.335 (5786): drop_caches: 2 [ 106.053968][ T5811] netlink: 76 bytes leftover after parsing attributes in process `syz.5.342'. [ 106.679225][ T5824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.344'. [ 109.575749][ T5868] batman_adv: batadv0: Adding interface: dummy0 [ 109.581493][ T5868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.604473][ T5868] batman_adv: batadv0: Interface activated: dummy0 [ 109.655810][ T5868] batadv0: mtu less than device minimum [ 109.661059][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.664523][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.667800][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.671166][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.674289][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.677434][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.680624][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.683748][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.686781][ T5868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.075451][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.354'. [ 111.687139][ T5924] Bluetooth: MGMT ver 1.22 [ 112.173030][ T5936] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.174874][ T5936] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.176165][ T5936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.177563][ T5936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.181686][ T5936] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 112.634372][ T5947] loop1: detected capacity change from 0 to 4096 [ 112.685431][ T5949] tipc: Started in network mode [ 112.686517][ T5949] tipc: Node identity e21fe6a0f6a2, cluster identity 4711 [ 112.730167][ T5949] tipc: Enabled bearer , priority 0 [ 112.761462][ T5949] device syzkaller0 entered promiscuous mode [ 112.769630][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.371'. [ 113.424024][ T5967] tipc: Resetting bearer [ 113.436783][ T5948] tipc: Resetting bearer [ 113.448383][ T5947] EXT4-fs: Ignoring removed i_version option [ 113.450775][ T5947] EXT4-fs: Ignoring removed oldalloc option [ 113.456634][ T5947] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.458641][ T5947] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 113.542408][ T5948] tipc: Disabling bearer [ 113.593284][ T5971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.374'. [ 114.763023][ T4588] net_ratelimit: 21 callbacks suppressed [ 114.763225][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 114.793060][ T6000] loop5: detected capacity change from 0 to 512 [ 114.801498][ T6000] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.882467][ T6000] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.379: Allocating blocks 41-42 which overlap fs metadata [ 114.899377][ T4639] bond1: (slave bond0): failed to get link speed/duplex [ 114.909123][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 114.910769][ T6000] Quota error (device loop5): write_blk: dquota write failed [ 114.913135][ T6000] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 114.916433][ T6000] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 114.918407][ T6000] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.379: Failed to acquire dquot type 1 [ 115.239771][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.243358][ T6000] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 115.248651][ T39] bond1: (slave bond0): failed to get link speed/duplex [ 115.268157][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.270224][ T6000] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.379: corrupted inode contents [ 115.491807][ T4549] bond1: (slave bond0): failed to get link speed/duplex [ 115.575194][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.619219][ T6000] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #12: comm syz.5.379: mark_inode_dirty error [ 115.636011][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.637815][ T6000] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.379: corrupted inode contents [ 115.669792][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.671637][ T6000] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.379: mark_inode_dirty error [ 115.686340][ T39] bond1: (slave bond0): failed to get link speed/duplex [ 115.688769][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 115.692389][ T6000] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.379: corrupted inode contents [ 115.995249][ T4415] bond1: (slave bond0): failed to get link speed/duplex [ 116.050590][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 116.051918][ T6000] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 116.060137][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 116.061503][ T6000] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.379: corrupted inode contents [ 116.065705][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 116.068034][ T6000] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.379: mark_inode_dirty error [ 116.073872][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 116.076320][ T6000] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 116.079534][ T6032] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 116.082043][ T6032] Zero length message leads to an empty skb [ 116.085575][ T6000] EXT4-fs (loop5): Remounting filesystem read-only [ 116.089548][ T6000] EXT4-fs (loop5): 1 truncate cleaned up [ 116.095935][ T6000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.110265][ T4573] bond1: (slave bond0): failed to get link speed/duplex [ 116.319635][ C0] [ 116.320108][ C0] ================================ [ 116.320968][ C0] WARNING: inconsistent lock state [ 116.321734][ C0] syzkaller #0 Not tainted [ 116.322395][ C0] -------------------------------- [ 116.323134][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 116.324179][ C0] syz.1.385/6035 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 116.325200][ C0] ffff0000cf8fe130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x94/0x138 [ 116.326768][ C0] {SOFTIRQ-ON-W} state was registered at: [ 116.327704][ C0] lock_acquire+0x20c/0x638 [ 116.328490][ C0] lock_sock_nested+0x70/0x130 [ 116.329301][ C0] x25_release+0xa0/0x3c4 [ 116.330134][ C0] sock_close+0xac/0x1ec [ 116.330953][ C0] __fput+0x1b4/0x7b0 [ 116.331729][ C0] ____fput+0x20/0x30 [ 116.332452][ C0] task_work_run+0x1f4/0x280 [ 116.333281][ C0] do_notify_resume+0x20f8/0x2c84 [ 116.334170][ C0] el0_svc+0x98/0x128 [ 116.334926][ C0] el0t_64_sync_handler+0x84/0xf0 [ 116.335766][ C0] el0t_64_sync+0x18c/0x190 [ 116.336565][ C0] irq event stamp: 87368 [ 116.337290][ C0] hardirqs last enabled at (87368): [] __local_bh_enable_ip+0x1f8/0x37c [ 116.338994][ C0] hardirqs last disabled at (87367): [] __local_bh_enable_ip+0x178/0x37c [ 116.340745][ C0] softirqs last enabled at (80056): [] handle_softirqs+0xb1c/0xc90 [ 116.342325][ C0] softirqs last disabled at (87009): [] __do_softirq+0x14/0x20 [ 116.343885][ C0] [ 116.343885][ C0] other info that might help us debug this: [ 116.345261][ C0] Possible unsafe locking scenario: [ 116.345261][ C0] [ 116.346550][ C0] CPU0 [ 116.347120][ C0] ---- [ 116.347689][ C0] lock(sk_lock-AF_X25); [ 116.348518][ C0] [ 116.349137][ C0] lock(sk_lock-AF_X25); [ 116.350070][ C0] [ 116.350070][ C0] *** DEADLOCK *** [ 116.350070][ C0] [ 116.351711][ C0] 2 locks held by syz.1.385/6035: [ 116.352695][ C0] #0: ffff0000e0614598 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x188/0xb20 [ 116.354554][ C0] #1: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 116.356382][ C0] [ 116.356382][ C0] stack backtrace: [ 116.357470][ C0] CPU: 0 PID: 6035 Comm: syz.1.385 Not tainted syzkaller #0 [ 116.358811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 116.360564][ C0] Call trace: [ 116.361152][ C0] dump_backtrace+0x1c4/0x1f0 [ 116.361982][ C0] show_stack+0x2c/0x3c [ 116.362713][ C0] __dump_stack+0x30/0x40 [ 116.363455][ C0] dump_stack_lvl+0xf4/0x15c [ 116.364239][ C0] dump_stack+0x1c/0x5c [ 116.364985][ C0] print_usage_bug+0x4c0/0x6dc [ 116.365809][ C0] mark_lock_irq+0x858/0xab8 [ 116.366621][ C0] mark_lock+0x224/0x320 [ 116.367461][ C0] __lock_acquire+0xa88/0x6634 [ 116.368347][ C0] lock_acquire+0x20c/0x638 [ 116.369196][ C0] lock_sock_nested+0x70/0x130 [ 116.370129][ C0] x25_kill_by_neigh+0x94/0x138 [ 116.371061][ C0] x25_link_terminated+0x5c/0x78 [ 116.372027][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 116.373079][ C0] netif_receive_skb_core+0x160/0x244 [ 116.373992][ C0] lapbeth_napi_poll+0x48/0xa0 [ 116.374857][ C0] __napi_poll+0xb8/0x3f4 [ 116.375653][ C0] net_rx_action+0x52c/0xb5c [ 116.376456][ C0] handle_softirqs+0x318/0xc90 [ 116.377276][ C0] __do_softirq+0x14/0x20 [ 116.378000][ C0] ____do_softirq+0x14/0x20 [ 116.378773][ C0] call_on_irq_stack+0x30/0x48 [ 116.379592][ C0] do_softirq_own_stack+0x20/0x2c [ 116.380436][ C0] __irq_exit_rcu+0x23c/0x430 [ 116.381214][ C0] irq_exit_rcu+0x14/0x84 [ 116.381952][ C0] el1_interrupt+0x38/0x54 [ 116.382709][ C0] el1h_64_irq_handler+0x18/0x24 [ 116.383530][ C0] el1h_64_irq+0x64/0x68 [ 116.384447][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 116.385564][ C0] __skb_try_recv_datagram+0x148/0x40c [ 116.386646][ C0] __unix_dgram_recvmsg+0x238/0xb20 [ 116.387673][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 116.388604][ C0] ____sys_recvmsg+0x270/0x754 [ 116.389543][ C0] do_recvmmsg+0x36c/0x9d8 [ 116.390331][ C0] __arm64_sys_recvmmsg+0x184/0x244 [ 116.391290][ C0] invoke_syscall+0x98/0x290 [ 116.392093][ C0] el0_svc_common+0x13c/0x258 [ 116.392919][ C0] do_el0_svc+0x5c/0x134 [ 116.393678][ C0] el0_svc+0x58/0x128 [ 116.394386][ C0] el0t_64_sync_handler+0x84/0xf0 [ 116.395236][ C0] el0t_64_sync+0x18c/0x190 [ 116.396051][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 116.397502][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6035, name: syz.1.385 [ 116.398936][ C0] preempt_count: 101, expected: 0 [ 116.399720][ C0] RCU nest depth: 1, expected: 0 [ 116.400509][ C0] INFO: lockdep is turned off. [ 116.401241][ C0] Preemption disabled at: [ 116.401253][ C0] [] __skb_try_recv_datagram+0x11c/0x40c [ 116.403172][ C0] CPU: 0 PID: 6035 Comm: syz.1.385 Not tainted syzkaller #0 [ 116.404243][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 116.405777][ C0] Call trace: [ 116.406290][ C0] dump_backtrace+0x1c4/0x1f0 [ 116.406960][ C0] show_stack+0x2c/0x3c [ 116.407589][ C0] __dump_stack+0x30/0x40 [ 116.408269][ C0] dump_stack_lvl+0xf4/0x15c [ 116.409049][ C0] dump_stack+0x1c/0x5c [ 116.409812][ C0] __might_resched+0x354/0x4e0 [ 116.410630][ C0] __might_sleep+0x94/0x110 [ 116.411377][ C0] lock_sock_nested+0x80/0x130 [ 116.412203][ C0] x25_kill_by_neigh+0x94/0x138 [ 116.413027][ C0] x25_link_terminated+0x5c/0x78 [ 116.413903][ C0] x25_lapb_receive_frame+0x140/0xd0c [ 116.414812][ C0] netif_receive_skb_core+0x160/0x244 [ 116.415727][ C0] lapbeth_napi_poll+0x48/0xa0 [ 116.416547][ C0] __napi_poll+0xb8/0x3f4 [ 116.417304][ C0] net_rx_action+0x52c/0xb5c [ 116.418110][ C0] handle_softirqs+0x318/0xc90 [ 116.418918][ C0] __do_softirq+0x14/0x20 [ 116.419649][ C0] ____do_softirq+0x14/0x20 [ 116.420458][ C0] call_on_irq_stack+0x30/0x48 [ 116.421276][ C0] do_softirq_own_stack+0x20/0x2c [ 116.422197][ C0] __irq_exit_rcu+0x23c/0x430 [ 116.423003][ C0] irq_exit_rcu+0x14/0x84 [ 116.423800][ C0] el1_interrupt+0x38/0x54 [ 116.424581][ C0] el1h_64_irq_handler+0x18/0x24 [ 116.425425][ C0] el1h_64_irq+0x64/0x68 [ 116.426156][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 116.427147][ C0] __skb_try_recv_datagram+0x148/0x40c [ 116.428081][ C0] __unix_dgram_recvmsg+0x238/0xb20 [ 116.428964][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 116.429794][ C0] ____sys_recvmsg+0x270/0x754 [ 116.430644][ C0] do_recvmmsg+0x36c/0x9d8 [ 116.431431][ C0] __arm64_sys_recvmmsg+0x184/0x244 [ 116.432390][ C0] invoke_syscall+0x98/0x290 [ 116.433187][ C0] el0_svc_common+0x13c/0x258 [ 116.434012][ C0] do_el0_svc+0x5c/0x134 [ 116.434735][ C0] el0_svc+0x58/0x128 [ 116.435439][ C0] el0t_64_sync_handler+0x84/0xf0 [ 116.436329][ C0] el0t_64_sync+0x18c/0x190 [ 116.475265][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 116.526397][ T5338] EXT4-fs (loop5): unmounting filesystem. [ 116.599493][ T4415] bond1: (slave bond0): failed to get link speed/duplex [ 119.808885][ T4639] net_ratelimit: 27 callbacks suppressed [ 119.808900][ T4639] bond1: (slave bond0): failed to get link speed/duplex [ 119.918897][ T4415] bond1: (slave bond0): failed to get link speed/duplex [ 120.039000][ T39] bond1: (slave bond0): failed to get link speed/duplex [ 120.149460][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 120.258903][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 120.369449][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 120.488978][ T4415] bond1: (slave bond0): failed to get link speed/duplex [ 120.599132][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 120.708938][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 120.819119][ T4588] bond1: (slave bond0): failed to get link speed/duplex [ 122.798906][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 124.828929][ T4415] net_ratelimit: 35 callbacks suppressed [ 124.828942][ T4415] bond1: (slave bond0): failed to get link speed/duplex [ 124.938875][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 125.048898][ T4639] bond1: (slave bond0): failed to get link speed/duplex [ 125.168901][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 125.279131][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 125.389057][ T11] bond1: (slave bond0): failed to get link speed/duplex [ 125.498898][ T39] bond1: (slave bond0): failed to get link speed/duplex [ 125.609072][ T4639] bond1: (slave bond0): failed to get link speed/duplex [ 125.719099][ T4573] bond1: (slave bond0): failed to get link speed/duplex [ 125.828897][ T39] bond1: (slave bond0): failed to get link speed/duplex [ 125.919217][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920512][ T2064] ieee802154 phy1 wpan1: encryption failed: -22