last executing test programs: 15.987482386s ago: executing program 0 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd7e, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd70, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd5c, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 15.26474903s ago: executing program 0 (id=666): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 14.781825465s ago: executing program 2 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000800000000000000009000000850000002700"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.774858866s ago: executing program 0 (id=669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r3}, &(0x7f0000000240)=0x8) 14.716244427s ago: executing program 2 (id=671): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.212310004s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001040)={0xff34, 0x5, 0x5, 0x8}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 13.823261577s ago: executing program 0 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff55a, 0x4, 0x1, 0x3, 0x9}, 0x25}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 2.917215904s ago: executing program 0 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0xff, 0xaee0, 0x4, 0x2}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x481c, 0x0, 0x200, 0x3}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) 2.901944434s ago: executing program 2 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) dup(0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x1) 2.880135915s ago: executing program 3 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRES32=r1], 0x90}}, 0x0) 2.879597395s ago: executing program 0 (id=693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x800) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \r,'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.838678507s ago: executing program 3 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340"], 0xe4}}, 0x800) 2.796399738s ago: executing program 3 (id=699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="3200000000000000714d2b4bb64af7504454dd1dd8f82446ce5aa5fcf8eef43bd94200b31a2b5009c79253c8c8560df834da80e1bb606c083041df2a48b5768adc3a1b605310cb16a6286604f45cea2547779a71ed7b4f651266bca1100840f5665f376b0a1a9d4323baebcfcb8d862080c2bf182247"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x5}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000b90) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f018, 0x1}) 2.684282232s ago: executing program 1 (id=701): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.661927543s ago: executing program 1 (id=702): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r5, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000a00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ff900000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) 2.604712504s ago: executing program 4 (id=704): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1, @mcast2, 0x9d3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x8a, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x42442, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) 2.514308657s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff55a, 0x4, 0x1, 0x3, 0x9}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 2.000033074s ago: executing program 2 (id=706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) 1.947204416s ago: executing program 3 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007000000000006000440462000000c000280080001407f0000"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.935731826s ago: executing program 1 (id=708): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073790530000000000800410073697700140033006c6f0000000000000000000048e4f411cd3d7a2be9be58f71c4583f02a5203d8fae3cd7fa31e5931b4fb13e4a2b5bc8a71"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000380)=0x7) fsmount(0xffffffffffffffff, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.913008197s ago: executing program 3 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) 618.92122ms ago: executing program 3 (id=710): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r0], 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 618.05688ms ago: executing program 4 (id=711): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 607.5612ms ago: executing program 1 (id=712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x16}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x80000001, 0x0, 0xfffefffc}}) close_range(r0, 0xffffffffffffffff, 0x0) 550.272302ms ago: executing program 4 (id=713): socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 509.651413ms ago: executing program 2 (id=714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V'], 0xfe33) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000000240)) 492.250644ms ago: executing program 4 (id=715): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 142.085595ms ago: executing program 1 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d06001400128009000100766574680000000004000280080020000900000008001f0004"], 0x44}, 0x1, 0xba01}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1, 0x3ff, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xcf, &(0x7f0000000180)=""/207, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xe, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x2, 0x2, 0x3}, {0x1, 0x5, 0x3}, {0x2, 0x5, 0x9, 0x5}, {0x3, 0x3, 0x9, 0x4}, {0x0, 0x1, 0x10, 0x4}, {0x5, 0x1, 0xa, 0x5}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000080), &(0x7f0000000580)=r9}, 0x20) 95.578367ms ago: executing program 4 (id=717): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=718): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 28.936269][ T4314] cgroup: Unknown subsys name 'net' [ 29.144673][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.407688][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.667210][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.668720][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.670068][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.672361][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.673764][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.674955][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.676308][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.677764][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.679306][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.680427][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.680768][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.682060][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.683631][ T4338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.684241][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.685324][ T4338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.686369][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.687514][ T4338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.688351][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.689237][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.690331][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.692201][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.694643][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.696023][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.699277][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.699349][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.701928][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.702190][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.704330][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.705762][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.706262][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.829570][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.841500][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.846433][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.855412][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.886666][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888035][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.889574][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.900313][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.901538][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.903334][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.916661][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.917886][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.919472][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.932114][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.933369][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.934883][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.936555][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.937758][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.939222][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.942888][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.944191][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.945710][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.948964][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.950156][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.951746][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.955014][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.956274][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.957840][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.960135][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.963526][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.970327][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.980081][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.982543][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.985267][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.995226][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.997761][ T4334] team0: Port device team_slave_0 added [ 30.999489][ T4334] team0: Port device team_slave_1 added [ 31.001538][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.004024][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.018982][ T4327] team0: Port device team_slave_0 added [ 31.027865][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.029066][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.030536][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.037206][ T4327] team0: Port device team_slave_1 added [ 31.038413][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.039595][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.044239][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.047153][ T4326] team0: Port device team_slave_0 added [ 31.048393][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.049562][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.051025][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.057575][ T4328] team0: Port device team_slave_0 added [ 31.060554][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.061669][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.066410][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.068993][ T4326] team0: Port device team_slave_1 added [ 31.070736][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.073539][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.075577][ T4328] team0: Port device team_slave_1 added [ 31.090112][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.091261][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.096043][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.098336][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.099545][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.103960][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.106334][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.107445][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.111692][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.122091][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.123261][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.127730][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.130599][ T4339] team0: Port device team_slave_0 added [ 31.172882][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.222100][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.262178][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.263328][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.267361][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.270330][ T4339] team0: Port device team_slave_1 added [ 31.271619][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.275310][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.279783][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.303392][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.304588][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.308938][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.343039][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.381997][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.421811][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.423209][ T4327] Cannot create hsr debugfs directory [ 31.429235][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.430422][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.435010][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.492877][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.531842][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.571845][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.573066][ T4326] Cannot create hsr debugfs directory [ 31.612825][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.661945][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.711788][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.712984][ T4328] Cannot create hsr debugfs directory [ 31.772910][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.811957][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.852053][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.853391][ T4339] Cannot create hsr debugfs directory [ 31.965523][ T4334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.002821][ T4334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.046886][ T4334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.074457][ T4334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.118477][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.152743][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.192932][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.245092][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.303013][ T4327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.332826][ T4327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.385700][ T4327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.427814][ T4327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.473409][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.504410][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.555876][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.592972][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.657101][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.696215][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.697446][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.732169][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 32.732174][ T4343] Bluetooth: hci4: command 0x0409 tx timeout [ 32.732248][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 32.739200][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.742035][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 32.793341][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.821787][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 32.844797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.846812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.854531][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.866021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.867778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.869335][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.870484][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.873562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.880546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.882628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.884263][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.885418][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.888289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.896182][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.903247][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.911539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.913474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.914959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.916858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.919089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.926420][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.928121][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.935061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.936447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.938164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.940096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.941580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.943836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.945364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.947730][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.949497][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.954295][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.958762][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.960272][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.961672][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.962857][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.965037][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.975057][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.978332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.979758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.987928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.989597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.991261][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.992512][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.994743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.996733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.998235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.999739][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.000858][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.010523][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.012976][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.018518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.020094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.022785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.032623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.034446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.036108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.037802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.041184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.046208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.047781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.049368][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.050839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.053204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.054781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.069329][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.075947][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.079443][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.080769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.082487][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.084096][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.085268][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.086620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.088186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.089433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.097601][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.099327][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.108471][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.110163][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.112708][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.114274][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.116040][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.117704][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.119644][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.121290][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.126172][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.127741][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.129264][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.130716][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.132280][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.133589][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.135411][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.136884][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.137998][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.155140][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.156710][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.158163][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.159636][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.161200][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.164398][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.165620][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.167013][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.168634][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.170231][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.173940][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.175605][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.177125][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.178705][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.180142][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.181620][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.185448][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.187006][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.188400][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.189897][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.193495][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.196275][ T4334] device veth0_vlan entered promiscuous mode [ 33.199415][ T4334] device veth1_vlan entered promiscuous mode [ 33.203648][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.206291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.207870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.209506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.210924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.215282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.217438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.219025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.220388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.229221][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.233644][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.235368][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.236848][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.238029][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.239711][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.245892][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.251041][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.254648][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.256358][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.260748][ T4334] device veth0_macvtap entered promiscuous mode [ 33.264206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.265851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.267535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.269067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.270928][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.272213][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.278488][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.286261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.287813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.289091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.290298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.292267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.293869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.295551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.297437][ T4326] device veth0_vlan entered promiscuous mode [ 33.303961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.305420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.307019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.308974][ T4326] device veth1_vlan entered promiscuous mode [ 33.314300][ T4334] device veth1_macvtap entered promiscuous mode [ 33.318665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.320250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.321657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.323719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.325287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.326854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.328416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.335814][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.337824][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.339435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.341066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.343234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.344452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.350591][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.362984][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.364350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.366263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.367928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.369477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.371737][ T4326] device veth0_macvtap entered promiscuous mode [ 33.377639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.379109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.380620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.383679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.385519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.387091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.388480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.391493][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.394728][ T4334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.396275][ T4334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397669][ T4334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399014][ T4334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403066][ T4326] device veth1_macvtap entered promiscuous mode [ 33.405512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.406973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.408612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.413441][ T4328] device veth0_vlan entered promiscuous mode [ 33.418605][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.420370][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.425941][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.430184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.431912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.434987][ T4328] device veth1_vlan entered promiscuous mode [ 33.444053][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.445810][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.447898][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.450728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.452785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.454236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.455670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.457173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.458730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.462395][ T4327] device veth0_vlan entered promiscuous mode [ 33.468700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.470184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.476228][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.493866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.495217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.498710][ T4327] device veth1_vlan entered promiscuous mode [ 33.501606][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.505991][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.507447][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.508927][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.520396][ T4328] device veth0_macvtap entered promiscuous mode [ 33.528134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.530202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.531586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.534555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.536597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.552307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.553979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.555644][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.556918][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.558444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.565995][ T4327] device veth0_macvtap entered promiscuous mode [ 33.569802][ T4328] device veth1_macvtap entered promiscuous mode [ 33.572734][ T4327] device veth1_macvtap entered promiscuous mode [ 33.575880][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.577198][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.578727][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.580265][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.584239][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.585972][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.598859][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.601302][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.605537][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.607213][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.609454][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.612519][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.614315][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.615973][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.617698][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.620065][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.625411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.627013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.628527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.630043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.638030][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.639587][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.641005][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642875][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.647992][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.649710][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.651348][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.654193][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.655811][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.657589][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.659766][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.661515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.663441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.665099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.666672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.684714][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.686497][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.688103][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.689783][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.691349][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.696265][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.698469][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.700006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.701635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.704128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.705677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.707482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.709133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.710817][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.712712][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.717888][ T4339] device veth0_vlan entered promiscuous mode [ 33.729998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.739406][ T4339] device veth1_vlan entered promiscuous mode [ 33.744110][ T4327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745620][ T4327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.747214][ T4327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748727][ T4327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.753017][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.754394][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.759829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.761443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.886599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.891681][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.893433][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.905400][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.906847][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.908610][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.927746][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.928993][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.931296][ T4339] device veth0_macvtap entered promiscuous mode [ 33.945614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.947160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.951591][ T4339] device veth1_macvtap entered promiscuous mode [ 33.955674][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.956929][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.958286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.959972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.988684][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.990305][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.992144][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.993777][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.995377][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.997107][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.998783][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.000406][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.003758][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.006011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.007607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.010065][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.011293][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.016056][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.016547][ T4418] tmpfs: Bad value for 'mpol' [ 34.018581][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.020457][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.022539][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.024221][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.025892][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.027632][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.029268][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.030847][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.033840][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.035127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.036814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.068438][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.073070][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.074533][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.075958][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.130932][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.132494][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.143061][ T4425] process 'syz.2.3' launched '/dev/fd/5' with NULL argv: empty string added [ 34.148173][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.160409][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.162058][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.163357][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.169556][ T4432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.186615][ T4432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.191413][ T4432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.196730][ T4432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.227475][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.237471][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.238914][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.812188][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 34.813454][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 34.814913][ T4343] Bluetooth: hci2: command 0x041b tx timeout [ 34.816274][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.892074][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 35.039827][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.047042][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.108639][ T4452] binder: 4451:4452 tried to acquire reference to desc 0, got 1 instead [ 35.111341][ T4452] binder: 4451:4452 got transaction with invalid offset (72, min 0 max 112) or object. [ 35.116257][ T4452] binder: 4451:4452 transaction call to 4451:0 failed 5/29201/-22, size 112-24 line 3346 [ 35.118872][ T4446] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.191650][ T4456] loop0: detected capacity change from 0 to 1024 [ 35.202677][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 35.204373][ T4333] CPU: 0 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 35.205684][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 35.207235][ T4333] Workqueue: hci2 hci_rx_work [ 35.207975][ T4333] Call trace: [ 35.208489][ T4333] dump_backtrace+0x1c0/0x1ec [ 35.209308][ T4333] show_stack+0x2c/0x3c [ 35.210029][ T4333] __dump_stack+0x30/0x40 [ 35.210764][ T4333] dump_stack_lvl+0xf4/0x15c [ 35.211461][ T4333] dump_stack+0x1c/0x5c [ 35.212122][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 35.212503][ T4456] ======================================================= [ 35.212503][ T4456] WARNING: The mand mount option has been deprecated and [ 35.212503][ T4456] and is ignored by this kernel. Remove the mand [ 35.212503][ T4456] option from the mount to silence this warning. [ 35.212503][ T4456] ======================================================= [ 35.212944][ T4333] kobject_add_internal+0x598/0xb08 [ 35.219538][ T4333] kobject_add+0x140/0x20c [ 35.220242][ T4333] device_add+0x3f8/0xefc [ 35.220955][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 35.221763][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 35.222585][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 35.223523][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 35.224321][ T4333] hci_event_packet+0x6b8/0xf18 [ 35.225144][ T4333] hci_rx_work+0x328/0xa84 [ 35.225871][ T4333] process_one_work+0x7f8/0x13a4 [ 35.226647][ T4333] worker_thread+0x8c4/0xfec [ 35.227399][ T4333] kthread+0x250/0x2d8 [ 35.228072][ T4333] ret_from_fork+0x10/0x20 [ 35.237129][ T4333] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 35.239298][ T4333] Bluetooth: hci2: failed to register connection device [ 35.246837][ T4456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.258015][ T4458] loop1: detected capacity change from 0 to 4096 [ 35.275277][ T4456] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.16: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.281406][ T4456] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 35.286313][ T4456] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.16: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.590262][ T4456] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 35.592196][ T4456] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.16: Failed to acquire dquot type 0 [ 35.614285][ T4456] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 35.626128][ T4456] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.16: mark_inode_dirty error [ 35.633979][ T4466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.641389][ T4456] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 35.644751][ T4456] EXT4-fs (loop0): 1 orphan inode deleted [ 35.659053][ T4456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.665076][ T4464] loop4: detected capacity change from 0 to 8 [ 35.699072][ T4464] SQUASHFS error: xz decompression failed, data probably corrupt [ 35.705795][ T4464] SQUASHFS error: Failed to read block 0x108: -5 [ 35.714634][ T4464] SQUASHFS error: Unable to read metadata cache entry [106] [ 35.715972][ T4464] SQUASHFS error: Unable to read inode 0x11f [ 35.826696][ T4456] EXT4-fs: Ignoring removed bh option [ 37.025275][ T4343] Bluetooth: hci0: command 0x040f tx timeout [ 37.034276][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 37.034300][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 37.035305][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 37.036405][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 37.090712][ T4480] team0: Device ipip0 is up. Set it down before adding it as a team port [ 37.095281][ T9] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.114701][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 37.116211][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 37.144734][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 37.145822][ T4326] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.167141][ T4326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 37.181434][ T4326] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 37.782851][ T4487] vhci_hcd: invalid port number 96 [ 37.796551][ T4487] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 38.066444][ T4499] loop2: detected capacity change from 0 to 32768 [ 38.069635][ T4499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.27 (4499) [ 38.080505][ T4499] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.082347][ T4499] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 38.083810][ T4499] BTRFS info (device loop2): turning on async discard [ 38.084910][ T4499] BTRFS info (device loop2): metadata ratio 0 [ 38.085951][ T4499] BTRFS info (device loop2): setting nodatasum [ 38.086899][ T4499] BTRFS info (device loop2): using free space tree [ 38.426651][ T4505] sch_tbf: peakrate 7 is lower than or equals to rate 2067 ! [ 38.530627][ T4512] loop4: detected capacity change from 0 to 32768 [ 38.533151][ T4512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.30 (4512) [ 38.537092][ T4512] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 38.538771][ T4512] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 38.541954][ T4512] BTRFS info (device loop4): turning on sync discard [ 38.543470][ T4512] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 38.545569][ T4512] BTRFS info (device loop4): use zstd compression, level 3 [ 38.547294][ T4512] BTRFS info (device loop4): turning on async discard [ 38.549038][ T4512] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 38.551246][ T4512] BTRFS info (device loop4): trying to use backup root at mount time [ 38.553296][ T4512] BTRFS info (device loop4): turning on sync discard [ 38.556958][ T4512] BTRFS info (device loop4): using free space tree [ 38.861120][ T4499] BTRFS info (device loop2): enabling ssd optimizations [ 38.978862][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 38.981586][ T4512] BTRFS error (device loop4): failed to load root extent [ 38.983371][ T4512] BTRFS warning (device loop4): try to load backup roots slot 1 [ 38.985120][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 38.987646][ T4512] BTRFS warning (device loop4): couldn't read tree root [ 38.988882][ T4512] BTRFS warning (device loop4): try to load backup roots slot 2 [ 38.990556][ T4512] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 38.992715][ T4512] BTRFS warning (device loop4): couldn't read tree root [ 38.993913][ T4512] BTRFS warning (device loop4): try to load backup roots slot 3 [ 39.005899][ T4512] BTRFS info (device loop4): enabling ssd optimizations [ 39.008069][ T4512] BTRFS info (device loop4): rebuilding free space tree [ 39.057212][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 39.059225][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.060187][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.060261][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 39.115564][ T4343] Bluetooth: hci1: command 0x0419 tx timeout [ 39.149481][ T4512] BTRFS info (device loop4): checking UUID tree [ 39.368812][ T4327] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 39.407018][ T4339] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.549919][ T4597] loop2: detected capacity change from 0 to 32768 [ 40.622036][ T4447] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 40.737429][ T4597] XFS (loop2): Mounting V5 Filesystem [ 40.759979][ T4597] XFS (loop2): Ending clean mount [ 40.768033][ T4597] XFS (loop2): Quotacheck needed: Please wait. [ 40.785054][ T4597] XFS (loop2): Quotacheck: Done. [ 41.268754][ T4343] Bluetooth: hci2: command 0x2016 tx timeout [ 41.270421][ T4338] Bluetooth: hci5: command 0x1003 tx timeout [ 41.351980][ T4329] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.607400][ T4327] XFS (loop2): Unmounting Filesystem [ 41.627082][ T4592] loop0: detected capacity change from 0 to 64 [ 41.656183][ T4592] Trying to free block not in datazone [ 41.657481][ T4592] Trying to free block not in datazone [ 41.658459][ T4592] Trying to free block not in datazone [ 41.659280][ T4592] Trying to free block not in datazone [ 41.660242][ T4592] Trying to free block not in datazone [ 41.661024][ T4592] minix_free_block (loop0:6): bit already cleared [ 41.666165][ T4616] Bluetooth: MGMT ver 1.22 [ 41.668411][ T4592] Trying to free block not in datazone [ 41.669429][ T4592] Trying to free block not in datazone [ 41.670909][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.672796][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.751138][ T4447] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.759617][ T4447] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 41.760999][ T4447] usb 1-1: can't read configurations, error -71 [ 41.860626][ T4624] lo speed is unknown, defaulting to 1000 [ 41.861845][ T4624] lo speed is unknown, defaulting to 1000 [ 41.865834][ T4624] lo speed is unknown, defaulting to 1000 [ 41.872101][ T4624] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.880633][ T4624] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.913048][ T4624] lo speed is unknown, defaulting to 1000 [ 41.916122][ T4624] lo speed is unknown, defaulting to 1000 [ 41.918659][ T4624] lo speed is unknown, defaulting to 1000 [ 41.921219][ T4624] lo speed is unknown, defaulting to 1000 [ 41.923535][ T4624] lo speed is unknown, defaulting to 1000 [ 43.291864][ T4329] Bluetooth: hci2: command 0x2016 tx timeout [ 43.357765][ T4641] loop2: detected capacity change from 0 to 128 [ 43.359521][ T4641] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 43.368135][ T4641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.380998][ T4641] EXT4-fs (loop2): shut down requested (2) [ 43.395383][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 44.285409][ T4656] Zero length message leads to an empty skb [ 44.322609][ T4662] netlink: 'syz.3.57': attribute type 3 has an invalid length. [ 44.329702][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.332262][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.357243][ T4660] TC_ACT_REPEAT abuse ? [ 44.954862][ T4698] binder: 4697:4698 tried to acquire reference to desc 0, got 1 instead [ 44.957034][ T4698] binder_alloc: 4697: binder_alloc_buf, no vma [ 44.958497][ T4698] binder: cannot allocate buffer: vma cleared, target dead or dying [ 44.958525][ T4698] binder: 4697:4698 transaction call to 4697:0 failed 10/29189/-3, size 112-24 line 3230 [ 44.962334][ T4378] binder: undelivered TRANSACTION_ERROR: 29189 [ 45.176379][ T4723] loop2: detected capacity change from 0 to 128 [ 45.221003][ T4723] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 45.228683][ T4723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.234755][ T4723] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.84: checksumming directory block 0 [ 45.253997][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 45.271772][ T4557] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.728487][ T4557] usb 1-1: Using ep0 maxpacket: 16 [ 45.735206][ T4557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.737233][ T4557] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.738820][ T4557] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 45.741084][ T4557] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 45.745549][ T4557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.755641][ T4557] usb 1-1: config 0 descriptor?? [ 46.200040][ T4779] device syzkaller0 entered promiscuous mode [ 46.206824][ T4779] 0: reclassify loop, rule prio 0, protocol 800 [ 46.592645][ T4557] usbhid 1-1:0.0: can't add hid device: -71 [ 46.597711][ T4793] loop2: detected capacity change from 0 to 128 [ 46.623368][ T4557] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.626294][ T4557] usb 1-1: USB disconnect, device number 4 [ 46.629931][ T4793] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 46.662435][ T4793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.665893][ T4793] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.111: checksumming directory block 0 [ 46.690594][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 46.780828][ T4811] device syzkaller0 entered promiscuous mode [ 46.928565][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 47.361548][ T4847] Cannot find set identified by id 0 to match [ 47.394782][ T4849] lo speed is unknown, defaulting to 1000 [ 47.412356][ T4854] binder: tried to use weak ref as strong ref [ 47.418952][ T4854] binder: 4853:4854 Acquire 1 refcount change on invalid ref 0 ret -22 [ 47.430262][ T4854] binder: 4853:4854 got transaction to invalid handle, 1 [ 47.431575][ T4854] binder: 4854:4853 cannot find target node [ 47.435582][ T4854] binder: 4853:4854 transaction call to 0:0 failed 13/29201/-22, size 112-24 line 3045 [ 47.447916][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.653111][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 47.655091][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 47.656354][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.658018][ T4333] Workqueue: hci3 hci_rx_work [ 47.658801][ T4333] Call trace: [ 47.659339][ T4333] dump_backtrace+0x1c0/0x1ec [ 47.660126][ T4333] show_stack+0x2c/0x3c [ 47.660840][ T4333] __dump_stack+0x30/0x40 [ 47.661634][ T4333] dump_stack_lvl+0xf4/0x15c [ 47.662399][ T4333] dump_stack+0x1c/0x5c [ 47.663097][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 47.663979][ T4333] kobject_add_internal+0x598/0xb08 [ 47.664830][ T4333] kobject_add+0x140/0x20c [ 47.665609][ T4333] device_add+0x3f8/0xefc [ 47.666344][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 47.667149][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 47.668086][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 47.669103][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 47.669924][ T4333] hci_event_packet+0x6b8/0xf18 [ 47.670726][ T4333] hci_rx_work+0x328/0xa84 [ 47.671497][ T4333] process_one_work+0x7f8/0x13a4 [ 47.672283][ T4333] worker_thread+0x8c4/0xfec [ 47.673043][ T4333] kthread+0x250/0x2d8 [ 47.673702][ T4333] ret_from_fork+0x10/0x20 [ 47.680109][ T4333] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.682338][ T4333] Bluetooth: hci3: failed to register connection device [ 47.715096][ T4885] binder: tried to use weak ref as strong ref [ 47.716228][ T4885] binder: 4884:4885 Acquire 1 refcount change on invalid ref 0 ret -22 [ 47.718109][ T4885] binder: 4884:4885 got transaction to invalid handle, 1 [ 47.719340][ T4885] binder: 4885:4884 cannot find target node [ 47.720418][ T4885] binder: 4884:4885 transaction call to 0:0 failed 16/29201/-22, size 112-24 line 3045 [ 47.722640][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.853691][ C1] Illegal XDP return value 16128 on prog (id 5) dev bond_slave_1, expect packet loss! [ 47.867473][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 47.869088][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 47.870290][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.872036][ T4333] Workqueue: hci3 hci_rx_work [ 47.872860][ T4333] Call trace: [ 47.873452][ T4333] dump_backtrace+0x1c0/0x1ec [ 47.874310][ T4333] show_stack+0x2c/0x3c [ 47.875038][ T4333] __dump_stack+0x30/0x40 [ 47.875769][ T4333] dump_stack_lvl+0xf4/0x15c [ 47.876511][ T4333] dump_stack+0x1c/0x5c [ 47.877231][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 47.878059][ T4333] kobject_add_internal+0x598/0xb08 [ 47.878929][ T4333] kobject_add+0x140/0x20c [ 47.879634][ T4333] device_add+0x3f8/0xefc [ 47.880343][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 47.881136][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 47.881993][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 47.882999][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 47.883791][ T4333] hci_event_packet+0x6b8/0xf18 [ 47.884612][ T4333] hci_rx_work+0x328/0xa84 [ 47.885316][ T4333] process_one_work+0x7f8/0x13a4 [ 47.886143][ T4333] worker_thread+0x8c4/0xfec [ 47.886893][ T4333] kthread+0x250/0x2d8 [ 47.887547][ T4333] ret_from_fork+0x10/0x20 [ 47.889170][ T4333] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.891304][ T4333] Bluetooth: hci3: failed to register connection device [ 47.894282][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 47.895719][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 47.896863][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.898488][ T4333] Workqueue: hci3 hci_rx_work [ 47.899246][ T4333] Call trace: [ 47.899777][ T4333] dump_backtrace+0x1c0/0x1ec [ 47.900584][ T4333] show_stack+0x2c/0x3c [ 47.901348][ T4333] __dump_stack+0x30/0x40 [ 47.902121][ T4333] dump_stack_lvl+0xf4/0x15c [ 47.902936][ T4333] dump_stack+0x1c/0x5c [ 47.903627][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 47.904472][ T4333] kobject_add_internal+0x598/0xb08 [ 47.905332][ T4333] kobject_add+0x140/0x20c [ 47.906034][ T4333] device_add+0x3f8/0xefc [ 47.906790][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 47.907649][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 47.908570][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 47.909524][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 47.910280][ T4333] hci_event_packet+0x6b8/0xf18 [ 47.911075][ T4333] hci_rx_work+0x328/0xa84 [ 47.911795][ T4333] process_one_work+0x7f8/0x13a4 [ 47.912573][ T4333] worker_thread+0x8c4/0xfec [ 47.913366][ T4333] kthread+0x250/0x2d8 [ 47.914072][ T4333] ret_from_fork+0x10/0x20 [ 47.915051][ T4333] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.917157][ T4333] Bluetooth: hci3: failed to register connection device [ 47.973661][ T4913] loop0: detected capacity change from 0 to 4096 [ 47.995392][ T4917] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.488353][ T4945] binder: BINDER_SET_CONTEXT_MGR already set [ 48.490095][ T4945] binder: 4944:4945 ioctl 4018620d 20000040 returned -16 [ 48.576221][ T4951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'. [ 48.577833][ T4951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'. [ 48.865767][ T4970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 49.035604][ T4996] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 49.339260][ T5027] binder: 5026:5027 got transaction to invalid handle, 1 [ 49.348597][ T5027] binder: 5027:5026 cannot find target node [ 49.473679][ T5049] xt_hashlimit: size too large, truncated to 1048576 [ 49.484561][ T5051] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 49.626408][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 49.628096][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'. [ 49.648178][ T5069] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 49.654902][ T5069] device bond1 entered promiscuous mode [ 49.656043][ T5069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.665058][ T5069] bond1: (slave bridge1): making interface the new active one [ 49.666660][ T5069] device bridge1 entered promiscuous mode [ 49.668141][ T5069] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 49.669578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 49.691975][ T4333] Bluetooth: hci3: command 0x2016 tx timeout [ 49.906532][ T5092] netlink: 68 bytes leftover after parsing attributes in process `syz.1.233'. [ 49.909565][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 49.911064][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 49.924033][ T5080] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.925646][ T5080] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.926992][ T5080] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.928408][ T5080] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.949409][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 49.950915][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 50.149202][ T5120] netlink: 'syz.0.248': attribute type 39 has an invalid length. [ 50.287107][ T5128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.248'. [ 50.295250][ T5128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.248'. [ 50.424918][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.571848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.872390][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 51.071861][ T4380] usb 1-1: Using ep0 maxpacket: 16 [ 51.128987][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.130839][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.135113][ T4380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 51.141967][ T4380] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 51.147722][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.154767][ T4380] usb 1-1: config 0 descriptor?? [ 51.345026][ T5217] binder: 5215:5217 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 51.348437][ T5217] binder: 5215:5217 got transaction to invalid handle, 1 [ 51.349566][ T5217] binder_debug: 2 callbacks suppressed [ 51.349573][ T5217] binder: 5217:5215 cannot find target node [ 51.351662][ T5217] binder: 5215:5217 transaction call to 0:0 failed 25/29201/-22, size 112-24 line 3045 [ 51.354045][ T4447] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.399199][ T5222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.286'. [ 51.448617][ T5226] device syzkaller0 entered promiscuous mode [ 51.452182][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.454282][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.761222][ T4380] usbhid 1-1:0.0: can't add hid device: -71 [ 51.762324][ T4380] usbhid: probe of 1-1:0.0 failed with error -71 [ 51.765657][ T4380] usb 1-1: USB disconnect, device number 5 [ 51.771888][ T4329] Bluetooth: hci3: command 0x2016 tx timeout [ 51.904862][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.917461][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.918799][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.920701][ T5276] device bridge_slave_0 left promiscuous mode [ 51.940963][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.975129][ T5276] device bridge_slave_1 left promiscuous mode [ 51.976231][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.006702][ T5276] bond0: (slave bond_slave_0): Releasing backup interface [ 52.037635][ T5276] bond0: (slave bond_slave_1): Releasing backup interface [ 52.088896][ T5276] team0: Port device team_slave_0 removed [ 52.097975][ T5276] team0: Port device team_slave_1 removed [ 52.099513][ T5276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.100997][ T5276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.105942][ T5276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.107444][ T5276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.113801][ T5276] bond1: (slave bridge1): Releasing backup interface [ 52.115116][ T5276] device bridge1 left promiscuous mode [ 52.471020][ T5341] loop0: detected capacity change from 0 to 1024 [ 52.489243][ T5341] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 52.492064][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.604202][ T5359] syz.3.341 uses obsolete (PF_INET,SOCK_PACKET) [ 52.624730][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.626496][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.627950][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.634657][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.636205][ T5362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.862033][ T5393] binder: 5392:5393 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 53.851809][ T4333] Bluetooth: hci3: command 0x2016 tx timeout [ 54.415948][ T5492] binder: 5490:5492 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 54.559385][ T5505] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 55.351611][ T5557] __nla_validate_parse: 10 callbacks suppressed [ 55.351624][ T5557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.417'. [ 55.355495][ T5557] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.417'. [ 55.357345][ T5550] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.417'. [ 55.359087][ T5561] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.417'. [ 55.532659][ T4373] net_ratelimit: 38 callbacks suppressed [ 55.532669][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.535113][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.833263][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.871548][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.882878][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.884462][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.886007][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.895992][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.897684][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.900554][ T5584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.932180][ T4329] Bluetooth: hci3: command 0x2016 tx timeout [ 56.069585][ T5609] netlink: 'syz.2.439': attribute type 4 has an invalid length. [ 56.071966][ T5609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.439'. [ 56.413529][ T5623] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.444'. [ 56.432742][ T5625] netlink: 'syz.2.448': attribute type 3 has an invalid length. [ 56.434656][ T5625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 56.976636][ T5661] netlink: 'syz.2.463': attribute type 3 has an invalid length. [ 56.978009][ T5661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 57.006509][ T5666] netlink: 'syz.2.466': attribute type 25 has an invalid length. [ 57.007819][ T5666] netlink: 'syz.2.466': attribute type 6 has an invalid length. [ 57.011040][ T5666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.466'. [ 57.134623][ T5676] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.470'. [ 57.264897][ T5691] netlink: 'syz.2.477': attribute type 3 has an invalid length. [ 57.899491][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.900951][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.941229][ T5749] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 57.946351][ T5749] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 58.331046][ T5777] netlink: 'syz.3.510': attribute type 3 has an invalid length. [ 58.617281][ T5802] device syzkaller0 entered promiscuous mode [ 58.962390][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 58.963896][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 58.964977][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 58.966555][ T4333] Workqueue: hci3 hci_rx_work [ 58.967300][ T4333] Call trace: [ 58.967830][ T4333] dump_backtrace+0x1c0/0x1ec [ 58.968601][ T4333] show_stack+0x2c/0x3c [ 58.969276][ T4333] __dump_stack+0x30/0x40 [ 58.969947][ T4333] dump_stack_lvl+0xf4/0x15c [ 58.970717][ T4333] dump_stack+0x1c/0x5c [ 58.971387][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 58.972209][ T4333] kobject_add_internal+0x598/0xb08 [ 58.973027][ T4333] kobject_add+0x140/0x20c [ 58.973721][ T4333] device_add+0x3f8/0xefc [ 58.974425][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 58.975277][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 58.976151][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 58.977129][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 58.977875][ T4333] hci_event_packet+0x6b8/0xf18 [ 58.978648][ T4333] hci_rx_work+0x328/0xa84 [ 58.979319][ T4333] process_one_work+0x7f8/0x13a4 [ 58.980105][ T4333] worker_thread+0x8c4/0xfec [ 58.980850][ T4333] kthread+0x250/0x2d8 [ 58.981547][ T4333] ret_from_fork+0x10/0x20 [ 58.983130][ T4333] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.985480][ T4333] Bluetooth: hci3: failed to register connection device [ 58.987079][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 58.988676][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 58.989897][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 58.991349][ T4333] Workqueue: hci3 hci_rx_work [ 58.992123][ T4333] Call trace: [ 58.992641][ T4333] dump_backtrace+0x1c0/0x1ec [ 58.993365][ T4333] show_stack+0x2c/0x3c [ 58.994046][ T4333] __dump_stack+0x30/0x40 [ 58.994699][ T4333] dump_stack_lvl+0xf4/0x15c [ 58.995400][ T4333] dump_stack+0x1c/0x5c [ 58.996055][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 58.996843][ T4333] kobject_add_internal+0x598/0xb08 [ 58.997692][ T4333] kobject_add+0x140/0x20c [ 58.998376][ T4333] device_add+0x3f8/0xefc [ 58.999043][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 58.999802][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 59.000615][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 59.001522][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 59.002254][ T4333] hci_event_packet+0x6b8/0xf18 [ 59.002994][ T4333] hci_rx_work+0x328/0xa84 [ 59.003639][ T4333] process_one_work+0x7f8/0x13a4 [ 59.004451][ T4333] worker_thread+0x8c4/0xfec [ 59.005188][ T4333] kthread+0x250/0x2d8 [ 59.005858][ T4333] ret_from_fork+0x10/0x20 [ 59.008365][ T4333] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.010412][ T4333] Bluetooth: hci3: failed to register connection device [ 59.256898][ T5846] device syzkaller0 entered promiscuous mode [ 59.440701][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 59.442814][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 59.444066][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.445685][ T4333] Workqueue: hci4 hci_rx_work [ 59.446524][ T4333] Call trace: [ 59.447072][ T4333] dump_backtrace+0x1c0/0x1ec [ 59.447860][ T4333] show_stack+0x2c/0x3c [ 59.448565][ T4333] __dump_stack+0x30/0x40 [ 59.449298][ T4333] dump_stack_lvl+0xf4/0x15c [ 59.450112][ T4333] dump_stack+0x1c/0x5c [ 59.450800][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 59.451675][ T4333] kobject_add_internal+0x598/0xb08 [ 59.452510][ T4333] kobject_add+0x140/0x20c [ 59.453283][ T4333] device_add+0x3f8/0xefc [ 59.454032][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 59.454811][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 59.455694][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 59.456691][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 59.457497][ T4333] hci_event_packet+0x6b8/0xf18 [ 59.458311][ T4333] hci_rx_work+0x328/0xa84 [ 59.459078][ T4333] process_one_work+0x7f8/0x13a4 [ 59.459926][ T4333] worker_thread+0x8c4/0xfec [ 59.460690][ T4333] kthread+0x250/0x2d8 [ 59.461309][ T4333] ret_from_fork+0x10/0x20 [ 59.491846][ T4333] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.494043][ T4333] Bluetooth: hci4: failed to register connection device [ 59.529972][ T5862] netlink: 'syz.4.548': attribute type 10 has an invalid length. [ 59.531423][ T5862] device bond0 entered promiscuous mode [ 59.532564][ T5862] device bond_slave_0 entered promiscuous mode [ 59.533815][ T5862] device bond_slave_1 entered promiscuous mode [ 59.534994][ T5862] bridge0: port 3(bond0) entered blocking state [ 59.536132][ T5862] bridge0: port 3(bond0) entered disabled state [ 59.538117][ T5862] bridge0: port 3(bond0) entered blocking state [ 59.539218][ T5862] bridge0: port 3(bond0) entered forwarding state [ 59.665050][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.667343][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.786883][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 59.788610][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 59.789067][ T5876] loop0: detected capacity change from 0 to 512 [ 59.789790][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.792460][ T4333] Workqueue: hci2 hci_rx_work [ 59.793211][ T4333] Call trace: [ 59.793771][ T4333] dump_backtrace+0x1c0/0x1ec [ 59.794535][ T4333] show_stack+0x2c/0x3c [ 59.795281][ T4333] __dump_stack+0x30/0x40 [ 59.795974][ T4333] dump_stack_lvl+0xf4/0x15c [ 59.796751][ T4333] dump_stack+0x1c/0x5c [ 59.797418][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 59.798244][ T4333] kobject_add_internal+0x598/0xb08 [ 59.799133][ T4333] kobject_add+0x140/0x20c [ 59.799892][ T4333] device_add+0x3f8/0xefc [ 59.800602][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 59.801383][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 59.802284][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 59.803248][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 59.804104][ T4333] hci_event_packet+0x6b8/0xf18 [ 59.804880][ T4333] hci_rx_work+0x328/0xa84 [ 59.805597][ T4333] process_one_work+0x7f8/0x13a4 [ 59.806381][ T4333] worker_thread+0x8c4/0xfec [ 59.807129][ T4333] kthread+0x250/0x2d8 [ 59.807828][ T4333] ret_from_fork+0x10/0x20 [ 59.808876][ T4333] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.811026][ T4333] Bluetooth: hci2: failed to register connection device [ 59.814076][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 59.815597][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 59.816795][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.818333][ T4333] Workqueue: hci2 hci_rx_work [ 59.819067][ T4333] Call trace: [ 59.819601][ T4333] dump_backtrace+0x1c0/0x1ec [ 59.820375][ T4333] show_stack+0x2c/0x3c [ 59.820974][ T4333] __dump_stack+0x30/0x40 [ 59.821665][ T4333] dump_stack_lvl+0xf4/0x15c [ 59.822469][ T4333] dump_stack+0x1c/0x5c [ 59.823170][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 59.823958][ T4333] kobject_add_internal+0x598/0xb08 [ 59.824811][ T4333] kobject_add+0x140/0x20c [ 59.825544][ T4333] device_add+0x3f8/0xefc [ 59.826259][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 59.827074][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 59.827994][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 59.828976][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 59.829773][ T4333] hci_event_packet+0x6b8/0xf18 [ 59.830543][ T4333] hci_rx_work+0x328/0xa84 [ 59.831253][ T4333] process_one_work+0x7f8/0x13a4 [ 59.832054][ T4333] worker_thread+0x8c4/0xfec [ 59.832806][ T4333] kthread+0x250/0x2d8 [ 59.833457][ T4333] ret_from_fork+0x10/0x20 [ 59.834306][ T4333] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.836476][ T4333] Bluetooth: hci2: failed to register connection device [ 59.868635][ T5883] device hsr0 entered promiscuous mode [ 59.870037][ T5883] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.406563][ T5921] loop1: detected capacity change from 0 to 1024 [ 60.422466][ T5921] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.444689][ T5921] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.573: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.447742][ T5921] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 60.449250][ T5921] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.573: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.455125][ T5921] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 60.456752][ T5921] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.573: Failed to acquire dquot type 0 [ 60.461643][ T5921] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 60.467013][ T5921] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.573: mark_inode_dirty error [ 60.471223][ T5921] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 60.478590][ T5921] EXT4-fs (loop1): 1 orphan inode deleted [ 60.479714][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 60.493800][ T4445] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.498653][ T4445] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 60.501364][ T4445] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 60.510843][ T5921] EXT4-fs: Ignoring removed bh option [ 60.571920][ T5932] __nla_validate_parse: 3 callbacks suppressed [ 60.571932][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.575'. [ 60.583374][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 60.584603][ T4328] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 60.591170][ T4328] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 60.595672][ T4328] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 61.052880][ T4333] Bluetooth: hci3: command 0x2016 tx timeout [ 61.149504][ T4380] net_ratelimit: 270 callbacks suppressed [ 61.149517][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.296131][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.459846][ T4333] Bluetooth: hci4: command 0x2016 tx timeout [ 61.554253][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.793377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.863624][ T4329] Bluetooth: hci2: command 0x2016 tx timeout [ 61.908945][ T5992] validate_nla: 1 callbacks suppressed [ 61.908957][ T5992] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 61.911178][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.599'. [ 61.918391][ T5992] bridge0: port 4(ipvlan1) entered blocking state [ 61.919567][ T5992] bridge0: port 4(ipvlan1) entered disabled state [ 61.922397][ T5992] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 61.935754][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.938150][ T5994] device syzkaller0 entered promiscuous mode [ 61.957865][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.171994][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.332049][ T4333] Bluetooth: hci1: command 0x2016 tx timeout [ 62.411955][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.506423][ T6021] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 63.131870][ T4329] Bluetooth: hci3: command 0x2016 tx timeout [ 63.212942][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.531797][ T4333] Bluetooth: hci4: command 0x2016 tx timeout [ 63.932338][ T4329] Bluetooth: hci2: command 0x2016 tx timeout [ 64.494218][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495483][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.331887][ T4373] net_ratelimit: 5 callbacks suppressed [ 66.331899][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.372582][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.411847][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.491848][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.451924][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.612029][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.623138][ T7] cfg80211: failed to load regulatory.db [ 70.491913][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.531984][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.533465][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.571924][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.651904][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.611893][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.640523][ T6021] netlink: 'syz.3.608': attribute type 29 has an invalid length. [ 74.411815][ T4373] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 74.424924][ T6072] loop1: detected capacity change from 0 to 32768 [ 74.426695][ T6072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.624 (6072) [ 74.429645][ T6072] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.431317][ T6072] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 74.432857][ T6072] BTRFS info (device loop1): turning on sync discard [ 74.433902][ T6072] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.435433][ T6072] BTRFS info (device loop1): use zstd compression, level 3 [ 74.436552][ T6072] BTRFS info (device loop1): turning on async discard [ 74.437579][ T6072] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 74.439299][ T6072] BTRFS info (device loop1): trying to use backup root at mount time [ 74.440602][ T6072] BTRFS info (device loop1): enabling auto defrag [ 74.441600][ T6072] BTRFS info (device loop1): using free space tree [ 74.492995][ T4462] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 74.497147][ T6072] BTRFS error (device loop1): failed to load root extent [ 74.498460][ T6072] BTRFS warning (device loop1): try to load backup roots slot 1 [ 74.499843][ T4935] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 74.502682][ T6072] BTRFS warning (device loop1): couldn't read tree root [ 74.503893][ T6072] BTRFS warning (device loop1): try to load backup roots slot 2 [ 74.505359][ T6072] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 74.507267][ T6072] BTRFS warning (device loop1): couldn't read tree root [ 74.508340][ T6072] BTRFS warning (device loop1): try to load backup roots slot 3 [ 74.516456][ T6072] BTRFS info (device loop1): enabling ssd optimizations [ 74.517840][ T6072] BTRFS info (device loop1): rebuilding free space tree [ 74.521686][ T6072] BTRFS info (device loop1): checking UUID tree [ 74.611778][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 74.613832][ T4328] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.613894][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.617457][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.619082][ T4373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 74.621272][ T4373] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 74.623104][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.626927][ T4373] usb 1-1: config 0 descriptor?? [ 74.652050][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.672663][ T6098] "syz.4.626" (6098) uses obsolete ecb(arc4) skcipher [ 74.729916][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.738087][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.744608][ T6103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.628'. [ 75.456102][ T4373] usbhid 1-1:0.0: can't add hid device: -71 [ 75.457780][ T4373] usbhid: probe of 1-1:0.0 failed with error -71 [ 75.510427][ T4373] usb 1-1: USB disconnect, device number 6 [ 75.731500][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.768499][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.828950][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 75.879124][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.880812][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.743554][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.745275][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.655'. [ 76.879737][ T6177] loop0: detected capacity change from 0 to 32768 [ 77.006206][ T6177] XFS (loop0): Mounting V5 Filesystem [ 77.026340][ T6177] XFS (loop0): Ending clean mount [ 77.085370][ T4326] XFS (loop0): Unmounting Filesystem [ 77.771904][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.863597][ T6216] loop0: detected capacity change from 0 to 128 [ 77.885476][ T6216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.309534][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 78.491872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.811888][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.822144][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.854919][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.891862][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.135005][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.851889][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.932135][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.981860][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.021847][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.891867][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.051874][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.091870][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.892236][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.131882][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.172051][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.211838][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.941858][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.211067][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 90.219950][ T6293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.692'. [ 90.254117][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.330284][ T6313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.352382][ T6314] syz.3.699 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.385114][ T6313] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 33284 - 0 [ 90.387065][ T6313] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 33284 - 0 [ 90.388661][ T6313] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 33284 - 0 [ 90.390268][ T6313] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 33284 - 0 [ 90.394588][ T6313] device geneve2 entered promiscuous mode [ 90.396890][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.398602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.443218][ T6320] bridge0: port 3(batadv1) entered blocking state [ 90.444546][ T6320] bridge0: port 3(batadv1) entered disabled state [ 90.446170][ T6320] device batadv1 entered promiscuous mode [ 90.539946][ T4380] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 90.581442][ T6328] device syzkaller0 entered promiscuous mode [ 90.586051][ T6328] 0: reclassify loop, rule prio 0, protocol 800 [ 91.013639][ T4571] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 91.018600][ T4571] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 91.034118][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 91.035823][ T4380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 91.038058][ T4380] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 91.039528][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.110417][ T4380] usb 1-1: config 0 descriptor?? [ 91.112133][ T6299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.204192][ T6344] net_ratelimit: 2 callbacks suppressed [ 92.204205][ T6344] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 92.228734][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.230224][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.466232][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.537258][ T6333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.924363][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.925549][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.926637][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.927692][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.928881][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.930113][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.931262][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.933788][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.935065][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.936204][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.937275][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.941181][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.942837][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.943900][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.945071][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.946164][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.947201][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.948392][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.949471][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.950639][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.952187][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.953348][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.954492][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.955657][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.956890][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.957093][ T6364] device veth3 entered promiscuous mode [ 92.958068][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.969954][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.971069][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.972248][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.973322][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.974392][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.975454][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.976525][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.977516][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.978566][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.980022][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.981242][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.981888][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.982795][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.984734][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.985775][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.986968][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.988111][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.989325][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.990483][ T4380] waltop 0003:172F:0038.0001: unknown main item tag 0x0 [ 92.993263][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 93.004164][ T4380] waltop 0003:172F:0038.0001: hidraw0: USB HID v0.05 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0 [ 93.016758][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 93.112312][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.718'. [ 93.113844][ T6369] ------------[ cut here ]------------ [ 93.114801][ T6369] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 93.117048][ T6369] WARNING: CPU: 1 PID: 6369 at net/sched/cls_u32.c:853 u32_change+0x1698/0x1f18 [ 93.118469][ T6369] Modules linked in: [ 93.119093][ T6369] CPU: 1 PID: 6369 Comm: syz.4.718 Not tainted syzkaller #0 [ 93.120383][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.122077][ T6369] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 93.123424][ T6369] pc : u32_change+0x1698/0x1f18 [ 93.124293][ T6369] lr : u32_change+0x1698/0x1f18 [ 93.125105][ T6369] sp : ffff800020f66be0 [ 93.125767][ T6369] x29: ffff800020f66d40 x28: ffff0000d2526400 x27: 0000000000000000 [ 93.127027][ T6369] x26: 1fffe0001a4a4c8d x25: ffff0000d20ae000 x24: ffff0000d19f9200 [ 93.128386][ T6369] x23: 0000000000000010 x22: ffff7000041ecd8c x21: dfff800000000000 [ 93.129765][ T6369] x20: ffff800020f67400 x19: ffff800017c11000 x18: 0000000000000000 [ 93.131194][ T6369] x17: 20646c6569662065 x16: ffff800011a529a8 x15: 0000000000000002 [ 93.132481][ T6369] x14: 0000000000000001 x13: 1fffe00033ea39a3 x12: 0000000000080000 [ 93.133801][ T6369] x11: 0000000000002849 x10: ffff80002cf09000 x9 : 4781cfc2e1d99900 [ 93.135139][ T6369] x8 : 4781cfc2e1d99900 x7 : 0000000000000001 x6 : 0000000000000001 [ 93.136009][ T4447] usb 1-1: USB disconnect, device number 7 [ 93.136396][ T6369] x5 : ffff800020f66678 x4 : ffff800015324ea0 x3 : ffff80000853974c [ 93.138677][ T6369] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 93.140033][ T6369] Call trace: [ 93.140558][ T6369] u32_change+0x1698/0x1f18 [ 93.141306][ T6369] tc_new_tfilter+0xf60/0x1474 [ 93.142118][ T6369] rtnetlink_rcv_msg+0x6d8/0xcdc [ 93.142939][ T6369] netlink_rcv_skb+0x218/0x3e8 [ 93.143729][ T6369] rtnetlink_rcv+0x28/0x38 [ 93.144459][ T6369] netlink_unicast+0x60c/0x814 [ 93.145224][ T6369] netlink_sendmsg+0x6f4/0x9c0 [ 93.146060][ T6369] ____sys_sendmsg+0x5c8/0x938 [ 93.146834][ T6369] __sys_sendmmsg+0x344/0x834 [ 93.147562][ T6369] __arm64_sys_sendmmsg+0xa0/0xbc [ 93.148317][ T6369] invoke_syscall+0x98/0x290 [ 93.149043][ T6369] el0_svc_common+0x138/0x258 [ 93.149791][ T6369] do_el0_svc+0x58/0x130 [ 93.150480][ T6369] el0_svc+0x58/0x128 [ 93.151152][ T6369] el0t_64_sync_handler+0x84/0xf0 [ 93.152015][ T6369] el0t_64_sync+0x18c/0x190 [ 93.152806][ T6369] irq event stamp: 852 [ 93.153492][ T6369] hardirqs last enabled at (851): [] __up_console_sem+0xb4/0xfc [ 93.155076][ T6369] hardirqs last disabled at (852): [] el1_dbg+0x24/0x80 [ 93.156540][ T6369] softirqs last enabled at (816): [] local_bh_enable+0x10/0x34 [ 93.158050][ T6369] softirqs last disabled at (810): [] local_bh_disable+0x10/0x34 [ 93.159671][ T6369] ---[ end trace 0000000000000000 ]--- [ 93.292918][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.532249][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.331867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.333558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.572025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.573984][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.701950][ T4380] net_ratelimit: 4 callbacks suppressed [ 97.701962][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.732128][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.781892][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.171844][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.811964][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.852182][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.251828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.253469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.892150][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.893546][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog