last executing test programs: 2.309124144s ago: executing program 1 (id=507): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041d"], 0x8) 2.251653945s ago: executing program 1 (id=509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xef}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x10003f4, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.250535645s ago: executing program 1 (id=510): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) 1.570368642s ago: executing program 1 (id=516): mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='0\n\x00', 0x2) 1.501748233s ago: executing program 1 (id=518): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.062989314s ago: executing program 2 (id=524): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 1.058934484s ago: executing program 2 (id=525): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.007774746s ago: executing program 2 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x1c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 943.289977ms ago: executing program 2 (id=527): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x9}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 942.993077ms ago: executing program 2 (id=529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 920.148968ms ago: executing program 4 (id=531): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r0, &(0x7f0000000040)=""/196, 0xc4) close(0x3) 873.855069ms ago: executing program 4 (id=532): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35ddf000) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 640.252435ms ago: executing program 4 (id=540): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x9}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 626.288645ms ago: executing program 1 (id=541): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008040, &(0x7f0000000f00)={[{@grpquota}, {@nojournal_checksum}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5d2, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) shutdown(r4, 0x1) ptrace$setregset(0x4205, r0, 0x6, &(0x7f00000003c0)={&(0x7f0000000300)}) statx(r1, 0x0, 0x1000, 0x3ff7a9721f23b969, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) 609.160225ms ago: executing program 4 (id=542): socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) socket(0xa, 0x3, 0xff) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x50) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x9}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 523.053237ms ago: executing program 2 (id=544): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 465.172559ms ago: executing program 4 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 387.114111ms ago: executing program 4 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000dc0)=""/242, 0xf2}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/255, 0xff}, {&(0x7f0000002080)=""/189, 0xbd}, {&(0x7f0000002140)=""/53, 0x35}], 0x5}, 0x1}], 0x4, 0x0, 0x0) 386.997681ms ago: executing program 3 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x15) 332.984142ms ago: executing program 3 (id=550): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2f045ee5fe9249ed05b0ec37a721ec81ab367c04eced1ffc7fbe3af84e19dbc6046b923619a06e0b6ae2ebf0ab657d32cff916f0e3da24e4f26306f1c4527a44d729802f3e43485391176c630b0880ed637f5d351048b4203d62b3d96114252d70b4dd8bad5a321aa399", 0x6a}, {&(0x7f00000001c0)="2cf70e049d7ca10c2baa62463c54f810", 0x10}, {&(0x7f0000000380)="31d72a6285c9f0fd22840eb4fa3efffe5db82652a562faaf6ae0984ec6ed9392f197bc91fccde6e5fef0126874a9c6af4af27b0a444d4fc7ce7e9116de1a26d726ba1ecec36e7281e84f7e", 0x4b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe9590", 0xbc}, {0x0}, {&(0x7f0000000a80)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e8", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb128", 0x8e}], 0x1}}], 0x5, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 332.874102ms ago: executing program 3 (id=551): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 247.153124ms ago: executing program 3 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) 203.281685ms ago: executing program 0 (id=555): socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) socket(0xa, 0x3, 0xff) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x50) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x9}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 202.401105ms ago: executing program 3 (id=556): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 160.092216ms ago: executing program 3 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) 95.107438ms ago: executing program 0 (id=558): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2f045ee5fe9249ed05b0ec37a721ec81ab367c04eced1ffc7fbe3af84e19dbc6046b923619a06e0b6ae2ebf0ab657d32cff916f0e3da24e4f26306f1c4527a44d729802f3e43485391176c630b0880ed637f5d351048b4203d62b3d96114252d70b4dd8bad5a321aa399", 0x6a}, {&(0x7f00000001c0)="2cf70e049d7ca10c2baa62463c54f8109cb8795a3d7b326bb81c6bc290875437b4a5a3bcbd199c2cbdd4a149005a94946713c9081c76822a626d60fcfac2830c3f1d48ca7bdc14c329b2602e5bb1e920ceeb1a30", 0x54}, {&(0x7f0000000380)="31d72a6285c9f0fd22840eb4fa3efffe5db82652a562faaf6ae0984ec6ed9392f197bc91fccde6e5fef0126874a9c6af4af27b0a444d4fc7ce7e9116de1a26d726ba1ecec36e7281e84f7eeb26aafaccf1b6b512ff9785a9", 0x58}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7", 0x44}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x6}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c", 0x6c}], 0x1}}], 0x4, 0x4000000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 95.026558ms ago: executing program 0 (id=559): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 58.810499ms ago: executing program 0 (id=560): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, 0x0) 38.474879ms ago: executing program 0 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) 0s ago: executing program 0 (id=562): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 28.477352][ T4316] cgroup: Unknown subsys name 'net' [ 28.757399][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.034251][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.689751][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.691439][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.692953][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.694406][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.695799][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.700669][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.702227][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.703838][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.705641][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.705648][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.706967][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.708299][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.710065][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.712230][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.716998][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.719893][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.721451][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.723634][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.752234][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.753926][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.755953][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.757057][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.759123][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.760677][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.761931][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.763249][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.765618][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.772087][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.773706][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.775109][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.855909][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.870513][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 29.876849][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.892526][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.893844][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.896340][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.907845][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.909116][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.910814][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.930068][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.931296][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.932782][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.939668][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 29.947516][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.948796][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.950272][ T4328] device bridge_slave_1 entered promiscuous mode [ 29.957438][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.962926][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.964048][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.965847][ T4333] device bridge_slave_0 entered promiscuous mode [ 29.971644][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.977328][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.978714][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.980291][ T4333] device bridge_slave_1 entered promiscuous mode [ 29.985584][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.991737][ T4329] team0: Port device team_slave_0 added [ 29.993483][ T4329] team0: Port device team_slave_1 added [ 30.003613][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.011445][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.014419][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.018676][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.019737][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.023845][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.026752][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.027944][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.032394][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.052249][ T4328] team0: Port device team_slave_0 added [ 30.054608][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.056375][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.058002][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.062450][ T4333] team0: Port device team_slave_0 added [ 30.064068][ T4328] team0: Port device team_slave_1 added [ 30.070287][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.071538][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.073020][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.125967][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.164942][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.217411][ T4333] team0: Port device team_slave_1 added [ 30.218637][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.219786][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.223731][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.230670][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.232959][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.238579][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.239776][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.243788][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.253719][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.259894][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.260993][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.266978][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.273721][ T4341] team0: Port device team_slave_0 added [ 30.275417][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.276567][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.280937][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.292539][ T4341] team0: Port device team_slave_1 added [ 30.366081][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.405175][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.444921][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.446218][ T4328] Cannot create hsr debugfs directory [ 30.451467][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.452716][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.457876][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.505902][ T4333] device hsr_slave_0 entered promiscuous mode [ 30.555405][ T4333] device hsr_slave_1 entered promiscuous mode [ 30.594924][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.596195][ T4333] Cannot create hsr debugfs directory [ 30.605542][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.606746][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.611055][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.620387][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.621738][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.623193][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.639574][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.640926][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.642417][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.668160][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.705863][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.745026][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.784901][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.786190][ T4341] Cannot create hsr debugfs directory [ 30.792001][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.812537][ T4339] team0: Port device team_slave_0 added [ 30.819191][ T4339] team0: Port device team_slave_1 added [ 30.831498][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.832620][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836989][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.841752][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.842986][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.847522][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.850222][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.906039][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.946038][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.990006][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.076205][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.114942][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.164826][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.166222][ T4339] Cannot create hsr debugfs directory [ 31.181131][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.226107][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.271736][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.301486][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.375694][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.415960][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.455928][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.519405][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.598387][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.602416][ T4341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.622454][ T4341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.676144][ T4341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.716528][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.755152][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 31.755160][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 31.755256][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 31.768295][ T4341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.805714][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.834865][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 31.835963][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 31.857230][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.897082][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.937023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.939150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.946655][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.950010][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.952021][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.953664][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.954995][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.960117][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.971903][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.974181][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.976121][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.977334][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.982622][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.994698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.006098][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.007899][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.012464][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.014054][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.017266][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.021850][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.030909][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.032658][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.036610][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.043496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.045391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.046760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.048301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.050984][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.057070][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.064386][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.069655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.071457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.072853][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.074258][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.078127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.088079][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.090548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.092302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.093806][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.095054][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.100147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.111011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.112686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.114468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.119779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.121344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.123039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.124535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.126834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.128392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.130042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.134606][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.138755][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.143741][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.149314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.150927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.152396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.154026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.156379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.157992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.159479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.161470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.163026][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.164197][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.168498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.170241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.171827][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.173069][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.174438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.177473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.179125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.182879][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.184402][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.186154][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.187976][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.189245][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.194384][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.196195][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.197871][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.199506][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.200701][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.202082][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.215620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.217039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.218325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.219996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.221442][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.222708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.224131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.229534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.231177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.232982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.238020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.240019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.241790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.243526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.247208][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.248557][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.251756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.253353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.255669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.257511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.259989][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.263313][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.265069][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.267185][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.268678][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.270943][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.278475][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.280597][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.283622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.285530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.287051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.288713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.294730][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.297687][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.302098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.303699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.315348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.316997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.318764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.320430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.328511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.330325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.338665][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.342974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.344632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.348726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.350302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.357273][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.358788][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.376829][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.378482][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.380169][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.381695][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.383240][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.384608][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.391980][ T4329] device veth0_vlan entered promiscuous mode [ 32.396349][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.406473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.408197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.414442][ T4329] device veth1_vlan entered promiscuous mode [ 32.428189][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.429844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.431358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.432950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.438739][ T4333] device veth0_vlan entered promiscuous mode [ 32.441014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.446774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.460193][ T4333] device veth1_vlan entered promiscuous mode [ 32.473988][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.476147][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.477574][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.479006][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.480318][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.481820][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.483955][ T4333] device veth0_macvtap entered promiscuous mode [ 32.487669][ T4333] device veth1_macvtap entered promiscuous mode [ 32.492833][ T4329] device veth0_macvtap entered promiscuous mode [ 32.495961][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.497551][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.499159][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.500381][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.501626][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.503090][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.506588][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.509577][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.514573][ T4329] device veth1_macvtap entered promiscuous mode [ 32.518582][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.520225][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.533190][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.537514][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.539051][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.546437][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.550195][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.551503][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.554230][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.556984][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.559626][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.563483][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.565333][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.567792][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.569795][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.572461][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.578611][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.580450][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.582529][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.584461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.586481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.588156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.589755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.594648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.596592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.601013][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602564][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.603970][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.606715][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.610551][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611928][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.613407][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.617458][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629983][ T4341] device veth0_vlan entered promiscuous mode [ 32.638399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.640185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.642248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.643742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.661186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.662834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.664490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.667042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.668565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.669960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.672790][ T4341] device veth1_vlan entered promiscuous mode [ 32.682433][ T4328] device veth0_vlan entered promiscuous mode [ 32.687577][ T4328] device veth1_vlan entered promiscuous mode [ 32.701707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.703347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.706199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.707816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.709328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.710904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.721337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.722974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.728645][ T4339] device veth0_vlan entered promiscuous mode [ 32.738327][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.739672][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.739745][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.741566][ T282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.742210][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.747690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.755506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.757101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.761437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.763260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.765819][ T4341] device veth0_macvtap entered promiscuous mode [ 32.774362][ T4328] device veth0_macvtap entered promiscuous mode [ 32.780842][ T4341] device veth1_macvtap entered promiscuous mode [ 32.782891][ T4339] device veth1_vlan entered promiscuous mode [ 32.786735][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.788043][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.789231][ T4328] device veth1_macvtap entered promiscuous mode [ 32.789502][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.791652][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.798672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.800329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.801913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.803517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.805280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.806962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.808494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.810083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.811718][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.813542][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.815802][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.817570][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.820554][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.828420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.830213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.833430][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.837767][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.839388][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.841137][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.842692][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.844331][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.849276][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.852043][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.853764][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.859021][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.860678][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.862985][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.864371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.866709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.868470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.870166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.883009][ T4339] device veth0_macvtap entered promiscuous mode [ 32.885705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.887550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.889943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.891693][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.893453][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.897447][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.900092][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.901875][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.908564][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.910886][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.913115][ T4341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.914663][ T4341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.918771][ T4341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.920344][ T4341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.924160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.925948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.942228][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.943877][ T4408] device bridge_slave_1 left promiscuous mode [ 32.945294][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.976084][ T4408] device bridge_slave_0 left promiscuous mode [ 32.977390][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.217244][ T4339] device veth1_macvtap entered promiscuous mode [ 33.220120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.228222][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.233127][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.234687][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.236656][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.272579][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.273179][ T4413] overlayfs: missing 'lowerdir' [ 33.276485][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.278375][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.280138][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.281589][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.283226][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.286829][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.288772][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.291427][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.302439][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.304288][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.322170][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.323967][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.333912][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.336325][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.338173][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.339948][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.341666][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.343366][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346070][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.352060][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.354127][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.358472][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.360019][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361572][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.362938][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.371338][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.372730][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.379331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.401388][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.402821][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.407074][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.420691][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.422002][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.423396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.428105][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.429452][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.431626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.451964][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.453412][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.455125][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.456533][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.459322][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.462363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.560375][ T4422] cgroup: Invalid name [ 33.623485][ T4433] loop3: detected capacity change from 0 to 736 [ 33.626242][ T4433] ======================================================= [ 33.626242][ T4433] WARNING: The mand mount option has been deprecated and [ 33.626242][ T4433] and is ignored by this kernel. Remove the mand [ 33.626242][ T4433] option from the mount to silence this warning. [ 33.626242][ T4433] ======================================================= [ 33.654694][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 33.656976][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 33.660680][ T4436] Zero length message leads to an empty skb [ 33.733041][ T4440] overlayfs: missing 'lowerdir' [ 33.838898][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 33.839965][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 33.840970][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 33.920988][ T4461] netlink: 144 bytes leftover after parsing attributes in process `syz.3.24'. [ 33.923506][ T4462] sctp: [Deprecated]: syz.2.26 (pid 4462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.923506][ T4462] Use struct sctp_sack_info instead [ 33.926197][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 33.926233][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 33.936307][ T4461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'. [ 33.962539][ T4466] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 33.964043][ T4466] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.987011][ T4469] loop4: detected capacity change from 0 to 128 [ 34.012827][ T4470] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 34.056307][ T4476] loop4: detected capacity change from 0 to 256 [ 34.068758][ T4476] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.443892][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.445845][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.559775][ T4500] process 'syz.4.40' launched '/dev/fd/4' with NULL argv: empty string added [ 34.601777][ T4503] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 34.603345][ T4503] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.865150][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.901124][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.100051][ T4526] loop2: detected capacity change from 0 to 8192 [ 35.148704][ T4528] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 35.150633][ T4528] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 35.206123][ T4478] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.207604][ T4478] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.209210][ T4478] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.210876][ T4478] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.672358][ T4551] netlink: 'syz.3.60': attribute type 4 has an invalid length. [ 35.814014][ T4557] overlayfs: missing 'lowerdir' [ 35.840726][ T4559] loop1: detected capacity change from 0 to 128 [ 35.915008][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 35.916149][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 35.917182][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 35.960354][ T4563] loop4: detected capacity change from 0 to 16 [ 35.972445][ T4563] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.005066][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 36.006192][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 36.481672][ T4583] overlayfs: missing 'lowerdir' [ 37.037787][ T4612] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20001000 [ 37.042550][ T4612] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 37.165334][ T4612] sctp: [Deprecated]: syz.4.88 (pid 4612) Use of int in max_burst socket option. [ 37.165334][ T4612] Use struct sctp_assoc_value instead [ 37.457703][ T4656] loop1: detected capacity change from 0 to 256 [ 37.460869][ T4656] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.619191][ T4670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'. [ 37.779849][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 37.781927][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.124'. [ 37.906682][ T4700] fuse: Bad value for 'fd' [ 37.995225][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 37.997960][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 37.998789][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 38.014260][ T4710] overlayfs: failed to clone upperpath [ 38.075315][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 38.076408][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 38.612175][ T4751] loop4: detected capacity change from 0 to 256 [ 39.354600][ T4781] overlayfs: missing 'workdir' [ 39.403288][ T4783] loop2: detected capacity change from 0 to 512 [ 39.492675][ T4786] loop2: detected capacity change from 0 to 736 [ 40.158450][ T4812] overlayfs: missing 'workdir' [ 40.642975][ T4828] block device autoloading is deprecated and will be removed. [ 40.643289][ T4829] loop3: detected capacity change from 0 to 16 [ 40.656583][ T4829] erofs: (device loop3): mounted with root inode @ nid 36. [ 40.889435][ T4841] overlayfs: missing 'workdir' [ 41.802767][ T4874] overlayfs: failed to clone upperpath [ 41.937485][ T4884] loop4: detected capacity change from 0 to 512 [ 41.998867][ T4884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.580952][ T4922] overlayfs: missing 'lowerdir' [ 43.450565][ T4969] loop3: detected capacity change from 0 to 128 [ 44.887744][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 45.654510][ T5052] loop3: detected capacity change from 0 to 512 [ 45.661365][ T5054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.662919][ T5054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.823817][ T5052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.236961][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.238677][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.403706][ T5182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.406324][ T5182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.544872][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 48.813955][ T5206] loop1: detected capacity change from 0 to 512 [ 48.831141][ T5206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.949042][ T5218] device syzkaller0 entered promiscuous mode [ 49.901844][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 50.406053][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.407791][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.504577][ T5294] loop1: detected capacity change from 0 to 512 [ 50.510684][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 50.564702][ T5294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.605286][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.607019][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.564717][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 52.080846][ T5372] device syzkaller1 entered promiscuous mode [ 52.334062][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.343480][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.080203][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 53.401060][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.409850][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.558781][ T5450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.561990][ T5450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.801298][ T5470] loop3: detected capacity change from 0 to 512 [ 53.828324][ T5470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.958999][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.960476][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.995416][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 55.019976][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.021791][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.180377][ T5536] loop1: detected capacity change from 0 to 512 [ 55.214516][ T5536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.345884][ T4330] Bluetooth: hci1: unexpected event 0x05 length: 12 > 4 [ 56.364974][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 57.416233][ T5620] syz.2.488 uses obsolete (PF_INET,SOCK_PACKET) [ 57.899061][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.900589][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.952747][ T5662] loop3: detected capacity change from 0 to 512 [ 57.954129][ C0] Unknown status report in ack skb [ 57.999517][ T5662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.140378][ T4330] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 58.474822][ T4330] Bluetooth: hci1: command 0x2016 tx timeout [ 58.638324][ T5680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.639838][ T5680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.797441][ T5692] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.807726][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.809278][ T5692] CIFS: Attempting to mount \\127.0.0.1\share [ 58.811289][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.078104][ T5701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.350485][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 59.629324][ T5692] CIFS: VFS: cifs_mount failed w/return code = -512 [ 59.709608][ T5748] loop1: detected capacity change from 0 to 512 [ 59.732943][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.184053][ T5785] svc: failed to register nfsdv3 RPC service (errno 101). [ 60.192445][ T5785] svc: failed to register nfsaclv3 RPC service (errno 101). [ 60.315557][ T5785] ================================================================== [ 60.317149][ T5785] BUG: KASAN: use-after-free in nfsd_svc+0x818/0x948 [ 60.318274][ T5785] Read of size 4 at addr ffff0000f30e0454 by task syz.3.557/5785 [ 60.319570][ T5785] [ 60.319987][ T5785] CPU: 0 PID: 5785 Comm: syz.3.557 Not tainted syzkaller #0 [ 60.321223][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.322951][ T5785] Call trace: [ 60.323435][ T5785] dump_backtrace+0x1c4/0x1f0 [ 60.324160][ T5785] show_stack+0x2c/0x3c [ 60.324861][ T5785] __dump_stack+0x30/0x40 [ 60.325563][ T5785] dump_stack_lvl+0xf4/0x15c [ 60.326226][ T5785] print_address_description+0x88/0x218 [ 60.326996][ T5785] print_report+0x50/0x68 [ 60.327606][ T5785] kasan_report+0xa8/0xfc [ 60.328216][ T5785] __asan_report_load4_noabort+0x2c/0x38 [ 60.329008][ T5785] nfsd_svc+0x818/0x948 [ 60.329612][ T5785] write_threads+0x2b4/0x310 [ 60.330328][ T5785] nfsctl_transaction_write+0x114/0x164 [ 60.331237][ T5785] vfs_write+0x2a8/0x7c8 [ 60.331926][ T5785] ksys_write+0x12c/0x228 [ 60.332797][ T5785] __arm64_sys_write+0x7c/0x90 [ 60.333671][ T5785] invoke_syscall+0x98/0x290 [ 60.334540][ T5785] el0_svc_common+0x13c/0x258 [ 60.335375][ T5785] do_el0_svc+0x5c/0x134 [ 60.336113][ T5785] el0_svc+0x58/0x128 [ 60.336789][ T5785] el0t_64_sync_handler+0x84/0xf0 [ 60.337687][ T5785] el0t_64_sync+0x18c/0x190 [ 60.338447][ T5785] [ 60.338821][ T5785] Allocated by task 5785: [ 60.339502][ T5785] kasan_set_track+0x4c/0x80 [ 60.340257][ T5785] kasan_save_alloc_info+0x24/0x30 [ 60.341171][ T5785] __kasan_kmalloc+0xa0/0xb8 [ 60.341942][ T5785] kmalloc_trace+0x7c/0x94 [ 60.342683][ T5785] __svc_create+0x80/0x89c [ 60.343429][ T5785] svc_create_pooled+0x648/0x7d8 [ 60.344269][ T5785] nfsd_create_serv+0x284/0x6a4 [ 60.345081][ T5785] nfsd_svc+0x168/0x948 [ 60.345812][ T5785] write_threads+0x2b4/0x310 [ 60.346636][ T5785] nfsctl_transaction_write+0x114/0x164 [ 60.347723][ T5785] vfs_write+0x2a8/0x7c8 [ 60.348507][ T5785] ksys_write+0x12c/0x228 [ 60.349174][ T5785] __arm64_sys_write+0x7c/0x90 [ 60.349965][ T5785] invoke_syscall+0x98/0x290 [ 60.350832][ T5785] el0_svc_common+0x13c/0x258 [ 60.351612][ T5785] do_el0_svc+0x5c/0x134 [ 60.352348][ T5785] el0_svc+0x58/0x128 [ 60.353027][ T5785] el0t_64_sync_handler+0x84/0xf0 [ 60.353915][ T5785] el0t_64_sync+0x18c/0x190 [ 60.354685][ T5785] [ 60.355152][ T5785] Freed by task 5785: [ 60.355818][ T5785] kasan_set_track+0x4c/0x80 [ 60.356658][ T5785] kasan_save_free_info+0x38/0x5c [ 60.357502][ T5785] ____kasan_slab_free+0x148/0x1b0 [ 60.358372][ T5785] __kasan_slab_free+0x18/0x28 [ 60.359161][ T5785] slab_free_freelist_hook+0x16c/0x1e8 [ 60.360208][ T5785] __kmem_cache_free+0xbc/0x21c [ 60.361074][ T5785] kfree+0xd0/0x1a8 [ 60.361752][ T5785] svc_destroy+0x144/0x184 [ 60.362523][ T5785] nfsd_svc+0x63c/0x948 [ 60.363275][ T5785] write_threads+0x2b4/0x310 [ 60.364087][ T5785] nfsctl_transaction_write+0x114/0x164 [ 60.365039][ T5785] vfs_write+0x2a8/0x7c8 [ 60.365762][ T5785] ksys_write+0x12c/0x228 [ 60.366520][ T5785] __arm64_sys_write+0x7c/0x90 [ 60.367349][ T5785] invoke_syscall+0x98/0x290 [ 60.368120][ T5785] el0_svc_common+0x13c/0x258 [ 60.368891][ T5785] do_el0_svc+0x5c/0x134 [ 60.369601][ T5785] el0_svc+0x58/0x128 [ 60.370239][ T5785] el0t_64_sync_handler+0x84/0xf0 [ 60.371082][ T5785] el0t_64_sync+0x18c/0x190 [ 60.371826][ T5785] [ 60.372157][ T5785] The buggy address belongs to the object at ffff0000f30e0400 [ 60.372157][ T5785] which belongs to the cache kmalloc-512 of size 512 [ 60.374390][ T5785] The buggy address is located 84 bytes inside of [ 60.374390][ T5785] 512-byte region [ffff0000f30e0400, ffff0000f30e0600) [ 60.376673][ T5785] [ 60.377065][ T5785] The buggy address belongs to the physical page: [ 60.378028][ T5785] page:000000006f02c143 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1330e0 [ 60.379699][ T5785] head:000000006f02c143 order:2 compound_mapcount:0 compound_pincount:0 [ 60.381061][ T5785] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 60.382460][ T5785] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002600 [ 60.383916][ T5785] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 60.385239][ T5785] page dumped because: kasan: bad access detected [ 60.386391][ T5785] [ 60.386797][ T5785] Memory state around the buggy address: [ 60.387755][ T5785] ffff0000f30e0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.389029][ T5785] ffff0000f30e0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.390514][ T5785] >ffff0000f30e0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.391980][ T5785] ^ [ 60.393093][ T5785] ffff0000f30e0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.394427][ T5785] ffff0000f30e0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.395922][ T5785] ================================================================== [ 60.411084][ T5785] Disabling lock debugging due to kernel taint [ 60.455168][ T5785] Unable to handle kernel paging request at virtual address dfff800000000000 [ 60.456714][ T5785] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 60.458172][ T5785] Mem abort info: [ 60.458801][ T5785] ESR = 0x0000000096000006 [ 60.459599][ T5785] EC = 0x25: DABT (current EL), IL = 32 bits [ 60.460635][ T5785] SET = 0, FnV = 0 [ 60.461297][ T5785] EA = 0, S1PTW = 0 [ 60.461963][ T5785] FSC = 0x06: level 2 translation fault [ 60.462892][ T5785] Data abort info: [ 60.463510][ T5785] ISV = 0, ISS = 0x00000006 [ 60.464265][ T5785] CM = 0, WnR = 0 [ 60.467248][ T5785] [dfff800000000000] address between user and kernel address ranges [ 60.468647][ T5785] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 60.469893][ T5785] Modules linked in: [ 60.470566][ T5785] CPU: 0 PID: 5785 Comm: syz.3.557 Tainted: G B syzkaller #0 [ 60.472046][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.473867][ T5785] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.475334][ T5785] pc : svc_unregister+0x110/0x624 [ 60.476321][ T5785] lr : svc_unregister+0x104/0x624 [ 60.477194][ T5785] sp : ffff800020f47820 [ 60.477914][ T5785] x29: ffff800020f47850 x28: dfff800000000000 x27: ffff0000ccf7c518 [ 60.479269][ T5785] x26: ffff0000f15a0000 x25: 0000000000000000 x24: 0000000000000000 [ 60.480673][ T5785] x23: ffff0000ccf7c514 x22: 1fffe000199ef8a2 x21: ffff0000ccf7c500 [ 60.482005][ T5785] x20: 1fffe000199ef8a3 x19: 0000000000000000 x18: 1fffe00033e7277e [ 60.483428][ T5785] x17: ffff80018a0bd000 x16: ffff800008043b30 x15: 0000000000000000 [ 60.484841][ T5785] x14: 0000000000000001 x13: 1fffe000185c1a80 x12: 0000000000080000 [ 60.486243][ T5785] x11: ff00800010f0aafc x10: 0000000000000002 x9 : ffff80001c5fab10 [ 60.487680][ T5785] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800010f4e7d8 [ 60.489049][ T5785] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800010f0ab38 [ 60.490398][ T5785] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 60.491845][ T5785] Call trace: [ 60.492408][ T5785] svc_unregister+0x110/0x624 [ 60.493238][ T5785] svc_rpcb_cleanup+0x28/0x40 [ 60.494050][ T5785] nfsd_last_thread+0x114/0x2e4 [ 60.494936][ T5785] nfsd_svc+0x698/0x948 [ 60.495608][ T5785] write_threads+0x2b4/0x310 [ 60.496393][ T5785] nfsctl_transaction_write+0x114/0x164 [ 60.497378][ T5785] vfs_write+0x2a8/0x7c8 [ 60.498121][ T5785] ksys_write+0x12c/0x228 [ 60.498815][ T5785] __arm64_sys_write+0x7c/0x90 [ 60.499611][ T5785] invoke_syscall+0x98/0x290 [ 60.500352][ T5785] el0_svc_common+0x13c/0x258 [ 60.501132][ T5785] do_el0_svc+0x5c/0x134 [ 60.501840][ T5785] el0_svc+0x58/0x128 [ 60.502509][ T5785] el0t_64_sync_handler+0x84/0xf0 [ 60.503299][ T5785] el0t_64_sync+0x18c/0x190 [ 60.504047][ T5785] Code: 97c3ad92 f9400379 8b190268 d343fd08 (387c6908) [ 60.505248][ T5785] ---[ end trace 0000000000000000 ]--- [ 60.710339][ T5785] Kernel panic - not syncing: Oops: Fatal exception [ 60.711572][ T5785] SMP: stopping secondary CPUs [ 60.712389][ T5785] Kernel Offset: disabled [ 60.713128][ T5785] CPU features: 0x0a0000,000f0097,a65bfea7 [ 60.714081][ T5785] Memory Limit: none [ 60.932998][ T5785] Rebooting in 86400 seconds..