last executing test programs: 8.444781761s ago: executing program 4 (id=437): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) 7.120984554s ago: executing program 4 (id=440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x0, 0x7fff, 0x203, 0x7, 0x6, 0x1, 0x5, 0xfff}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="b0", 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000600)="9b", 0x29fff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 6.824394761s ago: executing program 4 (id=446): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000004c0)="14000000070000000000000000", 0xd) 6.672886495s ago: executing program 4 (id=451): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x579a, {0x1a, 0x1, 0x7d, 0x6, 0x4}}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000040000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xdc001, 0x88) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x2000007ff) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x7000) futex(0x0, 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, 0x0, 0x2) 5.67706848s ago: executing program 1 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(0xffffffffffffffff) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 4.747346443s ago: executing program 1 (id=468): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019780)={0x8, 0x8b}, 0x0) semget(0x0, 0x1, 0x101) r1 = syz_open_dev$MSR(&(0x7f00000198c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019900)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000032900)='smaps\x00') pread64(r2, &(0x7f0000032940)=""/102400, 0x19000, 0xffffffff8) 4.652888105s ago: executing program 2 (id=469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000007c0), 0x56) sendmsg$kcm(r6, &(0x7f0000000800)={&(0x7f0000000840)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.529138758s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xa7c, r0}, 0x36) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 4.064388829s ago: executing program 1 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40900, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x8000) close(r1) r2 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 4.05423494s ago: executing program 2 (id=474): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000100)=""/53}, 0x20) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) 3.593616021s ago: executing program 2 (id=476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000006c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000700)="04", 0x1, 0x2404c081, &(0x7f0000000740)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 3.428167425s ago: executing program 4 (id=478): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x56202326, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='$|', 0x2}], 0x1}}], 0x1, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001b40)=0x40) ppoll(&(0x7f0000001e40)=[{0xffffffffffffffff, 0x2000}, {r0, 0x2080}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000001e80)={0x0, 0x3938700}, 0x0, 0x0) 3.23421424s ago: executing program 1 (id=479): socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000940)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc, @b={0x2, 0x0, 0x3, 0x1, 0x7, 0x0, 0xe1, {}, 0x2, 0x3, 0x9, 0x4}}, 0x10) 3.22230462s ago: executing program 2 (id=480): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000003c0)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000bc0)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffff0001, 0x8}) 3.060883854s ago: executing program 2 (id=481): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="40003d81"], 0x87) 1.665965878s ago: executing program 3 (id=483): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@local}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="3d3ae3993347", 0x6}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x3, 0x4000801) 1.665017278s ago: executing program 0 (id=486): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000038c0)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 1.664740068s ago: executing program 0 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x98) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000280)='6', 0x1) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.664434498s ago: executing program 4 (id=488): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x579a, {0x1a, 0x1, 0x7d, 0x6, 0x4}}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000040000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xdc001, 0x88) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x2000007ff) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x7000) futex(0x0, 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, 0x0, 0x2) 1.664005419s ago: executing program 0 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = fspick(0xffffffffffffffff, 0x0, 0x1) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget/dummy_udc\x00', 0x10b002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) write(r1, &(0x7f0000000240)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000002c0)={0x3, 0x98f907, 0x5}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x100000, 0x1, 0x40}, 0x10) r6 = gettid() timer_create(0x1, &(0x7f0000000580)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f00000005c0)=0x0) timer_settime(r7, 0x1, &(0x7f0000000600), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES16=r7, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) write(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'bridge0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000054000b002cbd7000fedbdf2507000000", @ANYRES8, @ANYBLOB="20000100", @ANYBLOB="b88e368bdbd30131863fdbe169a733d4767051ea0b2c05b1f14ced689aca9090fe4f36b1d81dafe9327673158527c25a0c1a1e95c38831c7d889af04d6c46b3b1ef95b59221451a7b844", @ANYBLOB="9902023f7600000200000022000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.61378357s ago: executing program 3 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40900, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x8000) close(r1) r2 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1.402773045s ago: executing program 3 (id=491): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000bc0)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffff0001, 0x8}) 1.341612906s ago: executing program 0 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newtfilter={0xe4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x9}}, @TCA_U32_SEL={0xa4, 0x5, {0xc, 0x8, 0x9, 0xfffe, 0x4, 0xc2c8, 0xa, 0x1, [{0x1c0000, 0x3, 0x10001, 0x6}, {0x10, 0xa, 0x1, 0x1}, {0xc, 0x4, 0x6, 0x8000}, {0x80000000, 0x3, 0xffff, 0xff}, {0x0, 0x1, 0x3, 0x4}, {0x9, 0x3, 0x9, 0x8}, {0x802, 0x9, 0x29, 0x400}, {0xfffffff7, 0x8, 0x1, 0x7ff}, {0xffffffff, 0x6, 0x24, 0x9}]}}]}}]}, 0xe4}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e9b5b00ace03dd65193dfb6c5619a3d86dd", 0x12}], 0x1) 1.327322917s ago: executing program 3 (id=493): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000740)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(0x4) 1.210346479s ago: executing program 3 (id=494): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000240), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000280)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 1.20161128s ago: executing program 0 (id=495): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019780)={0x8, 0x8b}, 0x0) semget(0x0, 0x1, 0x101) r1 = syz_open_dev$MSR(&(0x7f00000198c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019900)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000032900)='smaps\x00') pread64(r2, &(0x7f0000032940)=""/102400, 0x19000, 0xffffffff8) 998.681145ms ago: executing program 0 (id=496): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000100)=""/53}, 0x20) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) 550.329046ms ago: executing program 3 (id=497): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newtfilter={0x12c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0x7, 0xc}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xf4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xffd, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 213.34µs ago: executing program 1 (id=498): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14) 0s ago: executing program 2 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 68.476384][ T4258] cgroup: Unknown subsys name 'net' [ 68.578357][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.954336][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.134856][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.141489][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.418989][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.427091][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.435360][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.442668][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.450148][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.458250][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.465729][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.473123][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.494249][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.503302][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.510777][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.518194][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.539509][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.548229][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.555710][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.563563][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.570978][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.578414][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.601706][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.611873][ T4272] rdma_rxe: rxe_register_device failed with error -23 [ 71.619043][ T4272] rdma_rxe: failed to add rxe_eth0 [ 71.626713][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.634419][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.657512][ T4278] rdma_rxe: rxe_register_device failed with error -23 [ 71.681812][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.689355][ T4278] rdma_rxe: failed to add rxe_eth0 [ 71.694674][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.702296][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.710010][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.717807][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.725125][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.745737][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.753541][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.760958][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.769087][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.776685][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.791425][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.799071][ T4282] rdma_rxe: rxe_register_device failed with error -23 [ 71.841381][ T4285] rdma_rxe: rxe_register_device failed with error -23 [ 71.848261][ T4285] rdma_rxe: failed to add rxe_eth0 [ 71.852411][ T4282] rdma_rxe: failed to add rxe_eth0 [ 71.905538][ T4271] infiniband rxe0: set active [ 71.910975][ T4271] infiniband rxe0: added rxe_eth0 [ 71.924902][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.936736][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.996019][ T4271] RDS/IB: rxe0: added [ 72.004791][ T4271] smc: adding ib device rxe0 with port count 1 [ 72.011005][ T4271] smc: ib device rxe0 port 1 has pnetid [ 72.086632][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.095927][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.129911][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.203004][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.258574][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 72.406137][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 72.434928][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.494532][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 72.619433][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.634968][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.643640][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.652424][ T4278] device bridge_slave_0 entered promiscuous mode [ 72.669590][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.694372][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.702763][ T4278] device bridge_slave_1 entered promiscuous mode [ 72.764819][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 72.796973][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.829122][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.874332][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.881550][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.889448][ T4282] device bridge_slave_0 entered promiscuous mode [ 72.911335][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.918437][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.930829][ T4272] device bridge_slave_0 entered promiscuous mode [ 72.952924][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.960053][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.973264][ T4282] device bridge_slave_1 entered promiscuous mode [ 72.995153][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.006305][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.014594][ T4272] device bridge_slave_1 entered promiscuous mode [ 73.032412][ T4278] team0: Port device team_slave_0 added [ 73.098318][ T4278] team0: Port device team_slave_1 added [ 73.136676][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.187547][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.205400][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.230592][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.242147][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.250200][ T4285] device bridge_slave_0 entered promiscuous mode [ 73.262917][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.277548][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.284997][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.314085][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.337893][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.345487][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.353885][ T4285] device bridge_slave_1 entered promiscuous mode [ 73.385265][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.392304][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.421104][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.447823][ T4282] team0: Port device team_slave_0 added [ 73.456239][ T4282] team0: Port device team_slave_1 added [ 73.472455][ T4272] team0: Port device team_slave_0 added [ 73.480087][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.507271][ T4272] team0: Port device team_slave_1 added [ 73.521534][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.541516][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 73.606159][ T4278] device hsr_slave_0 entered promiscuous mode [ 73.612557][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 73.612871][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 73.628370][ T4278] device hsr_slave_1 entered promiscuous mode [ 73.637850][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.645167][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.671230][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.682987][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.689957][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.716064][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.729295][ T4285] team0: Port device team_slave_0 added [ 73.741192][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 73.757425][ T4285] team0: Port device team_slave_1 added [ 73.763884][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.770855][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.797030][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 73.808283][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.820056][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.829780][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.851436][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 73.862326][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.946590][ T4272] device hsr_slave_0 entered promiscuous mode [ 73.953901][ T4272] device hsr_slave_1 entered promiscuous mode [ 73.960405][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.968376][ T4272] Cannot create hsr debugfs directory [ 73.974291][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.981618][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.007710][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.035876][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.045225][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.071473][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.158726][ T4285] device hsr_slave_0 entered promiscuous mode [ 74.165812][ T4285] device hsr_slave_1 entered promiscuous mode [ 74.172989][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.180551][ T4285] Cannot create hsr debugfs directory [ 74.194835][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.202124][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.210123][ T4271] device bridge_slave_0 entered promiscuous mode [ 74.235526][ T4282] device hsr_slave_0 entered promiscuous mode [ 74.242314][ T4282] device hsr_slave_1 entered promiscuous mode [ 74.249262][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.257105][ T4282] Cannot create hsr debugfs directory [ 74.273783][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.280960][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.289180][ T4271] device bridge_slave_1 entered promiscuous mode [ 74.427726][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.477476][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.530767][ T4271] team0: Port device team_slave_0 added [ 74.539491][ T4271] team0: Port device team_slave_1 added [ 74.587791][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.594881][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.620899][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.650774][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.658337][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.684485][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.696982][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.725902][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.745401][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.760810][ T4271] device hsr_slave_0 entered promiscuous mode [ 74.767690][ T4271] device hsr_slave_1 entered promiscuous mode [ 74.774248][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.781965][ T4271] Cannot create hsr debugfs directory [ 74.787847][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.857461][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.878236][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.892972][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.917717][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.980625][ T4285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.989761][ T4285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.047949][ T4285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.058918][ T4285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.096482][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.105820][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.134314][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.162956][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.216806][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.245896][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.258597][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.269221][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.278988][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.310222][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.329357][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.337364][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.364901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.379412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.389144][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.396472][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.406171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.416359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.425163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.432339][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.440660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.470064][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.482948][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.509623][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.529395][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.541040][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.549493][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.563747][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.577573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.586690][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.595326][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.612036][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 75.639273][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.648068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.660680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.669530][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.681369][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.689933][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.691558][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 75.699518][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 75.711771][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.718893][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.727422][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.740594][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.754313][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.766717][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.782477][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.790862][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.799165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.807776][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.819601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.829372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.838284][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.845441][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.864359][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 75.878063][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.890116][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.898858][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.905995][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.914673][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.923961][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.931920][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 75.939667][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.948590][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.957433][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.964566][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.978111][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.992476][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.012770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.069129][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.081767][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.102428][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.111045][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.121923][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.130577][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.139075][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.153805][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.167646][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.178699][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.189191][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.200205][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.213832][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.224846][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.233615][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.244446][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.255170][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.266696][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.286542][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.296609][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.310689][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.322714][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.338023][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.346803][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.377564][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.390823][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.416015][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.435624][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.461968][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.469452][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.492012][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.506195][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.527153][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.534316][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.547693][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.558062][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.613852][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.642456][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.649929][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.659922][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.679023][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.693771][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.718704][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.738985][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.760214][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.777270][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.790521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.799055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.826732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.836659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.850385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.859209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.868302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.876984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.885460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.963299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.992300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.002797][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.009915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.041503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.052242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.064220][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071340][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.079694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.089141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.103530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.162254][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.170955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.189721][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.201109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.212837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.220275][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.256379][ T4278] device veth0_vlan entered promiscuous mode [ 77.266943][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.277874][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.295066][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.310057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.324339][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.334772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.344083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.352733][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.362437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.370756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.381605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.390046][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.425955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.444039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.463267][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.491661][ T4278] device veth1_vlan entered promiscuous mode [ 77.532958][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.540457][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.573237][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.618982][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.626982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.652488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.665422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.673314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.691407][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 77.706180][ T4285] device veth0_vlan entered promiscuous mode [ 77.760739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.771635][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 77.771779][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 77.792843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.813510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.838027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.872274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.905390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.917734][ T4278] device veth0_macvtap entered promiscuous mode [ 77.931555][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 77.950128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.959385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.968888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.003728][ T4285] device veth1_vlan entered promiscuous mode [ 78.011631][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 78.023294][ T4278] device veth1_macvtap entered promiscuous mode [ 78.032235][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.041127][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.055674][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.064806][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.076017][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.084574][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.136981][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.151550][ T4282] device veth0_vlan entered promiscuous mode [ 78.159830][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.172315][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.190726][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.200412][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.208169][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.258796][ T4285] device veth0_macvtap entered promiscuous mode [ 78.269343][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.282545][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.295629][ T4282] device veth1_vlan entered promiscuous mode [ 78.310938][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.320326][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.329435][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.339635][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.349188][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.362916][ T4285] device veth1_macvtap entered promiscuous mode [ 78.373797][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.384389][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.393367][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.402621][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435447][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.480377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.490146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.512916][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.524701][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.538904][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.590871][ T4282] device veth0_macvtap entered promiscuous mode [ 78.599584][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.609979][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.622590][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.632424][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.642563][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.664533][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.686833][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.699535][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.714432][ T4282] device veth1_macvtap entered promiscuous mode [ 78.730821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.739795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.749073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.769292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.778195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.787416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.796016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.805874][ T4271] device veth0_vlan entered promiscuous mode [ 78.837009][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.846791][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.856459][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.865785][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.877753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.887296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.910732][ T4271] device veth1_vlan entered promiscuous mode [ 78.921776][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.934052][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.944188][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.954706][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.966419][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.994905][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.003576][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.013295][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.022462][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.033308][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.044682][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.056594][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.067166][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.078121][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.098904][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.124285][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.134631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.150700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.160651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.169806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.178876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.192277][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.202556][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.213378][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.222265][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240849][ T4271] device veth0_macvtap entered promiscuous mode [ 79.267326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.282787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.290989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.300456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.308461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.321015][ T4272] device veth0_vlan entered promiscuous mode [ 79.333805][ T4271] device veth1_macvtap entered promiscuous mode [ 79.345176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.369859][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383061][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.408833][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.420035][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.430961][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.448073][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.458271][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.472594][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.484303][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.492412][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.501021][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.510408][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.545542][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.554123][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.563090][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.575414][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.586141][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.596856][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.607556][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.618275][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.630264][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.643693][ T4272] device veth1_vlan entered promiscuous mode [ 79.655267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.662667][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.670502][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.679778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.693183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.702178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.719039][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.731113][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.747395][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.759302][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.771478][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 79.853128][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 79.861483][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 79.919184][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.946946][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.972962][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.981455][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.125056][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 80.131379][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 80.210168][ T4272] device veth0_macvtap entered promiscuous mode [ 80.550637][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.574955][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.619369][ T4272] device veth1_macvtap entered promiscuous mode [ 80.682320][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.690193][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.778906][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.822919][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.871267][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.906316][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951650][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.006613][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.052811][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.096808][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.129149][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.178650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.198005][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.224586][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.270003][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.282650][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.290504][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.318595][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.345090][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.386051][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.400980][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.434566][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.468227][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.498000][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.530261][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.575375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.595546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.617195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.659869][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.671000][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.690558][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.732290][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741016][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.769517][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.822063][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.951157][ C0] sched: RT throttling activated [ 82.087086][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.096600][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.121356][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.209018][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.224116][ T4404] device syzkaller0 entered promiscuous mode [ 82.278134][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.327489][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.180163][ T4421] loop0: detected capacity change from 0 to 4096 [ 83.268767][ T4421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.375570][ T27] audit: type=1326 audit(1792588929.373:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.426276][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.440995][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 83.532952][ T27] audit: type=1326 audit(1792588929.373:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.608279][ T4430] loop3: detected capacity change from 0 to 512 [ 83.637039][ T27] audit: type=1326 audit(1792588929.373:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.714236][ T4435] device syzkaller0 entered promiscuous mode [ 83.720523][ T27] audit: type=1326 audit(1792588929.373:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.747350][ T4432] device syzkaller0 entered promiscuous mode [ 83.756043][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.765945][ T4430] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.808976][ T27] audit: type=1326 audit(1792588929.373:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.833150][ T27] audit: type=1326 audit(1792588929.373:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.858834][ T27] audit: type=1326 audit(1792588929.373:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.888904][ T27] audit: type=1326 audit(1792588929.373:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 83.936430][ T27] audit: type=1326 audit(1792588929.373:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 84.047926][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 84.053107][ T27] audit: type=1326 audit(1792588929.373:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683679f559 code=0x7ffc0000 [ 84.102589][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 84.207359][ T4445] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.421239][ T4334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.615687][ T4334] usb 5-1: config index 0 descriptor too short (expected 34617, got 36) [ 85.643287][ T4334] usb 5-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 86.042874][ T4334] usb 5-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 86.240241][ T4334] usb 5-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.335191][ T4495] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 86.422808][ T4490] loop2: detected capacity change from 0 to 512 [ 86.430109][ T4490] ======================================================= [ 86.430109][ T4490] WARNING: The mand mount option has been deprecated and [ 86.430109][ T4490] and is ignored by this kernel. Remove the mand [ 86.430109][ T4490] option from the mount to silence this warning. [ 86.430109][ T4490] ======================================================= [ 86.502895][ T26] cfg80211: failed to load regulatory.db [ 86.513606][ T4334] usb 5-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.561285][ T4334] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.605873][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.109054][ T4334] usbhid 5-1:217.0: can't add hid device: -71 [ 87.124991][ T4334] usbhid: probe of 5-1:217.0 failed with error -71 [ 87.176118][ T4334] usb 5-1: USB disconnect, device number 2 [ 87.306866][ T4512] device syzkaller0 entered promiscuous mode [ 87.579265][ T4526] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 88.117985][ T4541] block device autoloading is deprecated and will be removed. [ 88.260924][ T4551] device syzkaller0 entered promiscuous mode [ 88.297332][ T4551] tipc: Started in network mode [ 88.314128][ T4551] tipc: Node identity 26bae7572055, cluster identity 4711 [ 88.330715][ T4551] tipc: Enabled bearer , priority 0 [ 88.377015][ T4551] tipc: Resetting bearer [ 88.396890][ T4550] tipc: Resetting bearer [ 88.402818][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.459989][ T4550] tipc: Disabling bearer [ 88.528075][ T4560] device syzkaller0 entered promiscuous mode [ 88.596850][ T4562] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.625770][ T7] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 88.655601][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.685995][ T7] usb 5-1: Product: syz [ 88.690207][ T7] usb 5-1: Manufacturer: syz [ 88.705398][ T7] usb 5-1: SerialNumber: syz [ 88.753965][ T7] usb 5-1: USB2VGA dongle found at address 3 [ 88.792165][ T7] usb 5-1: Allocated 8 output buffers [ 89.165949][ T7] usb 5-1: Failed to early initialize device [ 89.214352][ T7] usb 5-1: USB disconnect, device number 3 [ 89.287933][ T4584] block device autoloading is deprecated and will be removed. [ 89.668968][ T4594] device syzkaller0 entered promiscuous mode [ 89.919041][ T4607] loop4: detected capacity change from 0 to 2048 [ 90.022211][ T4606] device syzkaller0 entered promiscuous mode [ 90.048567][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.076873][ T4606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.114375][ T4613] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 90.123968][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.241962][ T4614] hub 5-0:1.0: USB hub found [ 90.248736][ T4614] hub 5-0:1.0: 1 port detected [ 90.556842][ T4607] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.72: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.779118][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 90.779131][ T27] audit: type=1800 audit(1792588936.773:27): pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.75" name="UDC" dev="configfs" ino=34523 res=0 errno=0 [ 90.832492][ T4607] EXT4-fs (loop4): Remounting filesystem read-only [ 90.899570][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 91.248131][ T4631] device syzkaller0 entered promiscuous mode [ 91.256284][ T4633] gadgetfs: bound to dummy_udc driver [ 91.319225][ T4634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.460760][ T4633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.586148][ T4332] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.596159][ C0] gadgetfs: connected [ 91.600782][ T4332] gadgetfs: disconnected [ 91.648073][ T4641] device syzkaller0 entered promiscuous mode [ 91.713086][ T4627] gadgetfs: suspended from state 2 [ 91.821310][ T4351] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.895692][ T4645] device syzkaller0 entered promiscuous mode [ 91.991521][ T4332] usb 1-1: device not accepting address 2, error -71 [ 92.031229][ T4351] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 92.072619][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.093556][ T4351] usb 5-1: Product: syz [ 92.097835][ T4351] usb 5-1: Manufacturer: syz [ 92.106245][ T4351] usb 5-1: SerialNumber: syz [ 92.835063][ T4351] usb 5-1: USB2VGA dongle found at address 4 [ 92.844283][ T4351] usb 5-1: Allocated 8 output buffers [ 93.082459][ T4660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.123400][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 93.200165][ T4665] loop3: detected capacity change from 0 to 512 [ 93.206488][ T4351] usb 5-1: Failed to early initialize device [ 93.253449][ T4351] usb 5-1: USB disconnect, device number 4 [ 93.318022][ T4665] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.339442][ T4665] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 93.351743][ T4665] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.429544][ T4665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.94: bg 0: block 15: invalid block bitmap [ 93.541174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 93.581180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 93.662075][ T4665] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 93.785932][ T4665] EXT4-fs (loop3): 1 truncate cleaned up [ 93.867230][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.892702][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.120522][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.181157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 94.233217][ T4665] EXT4-fs (loop3): shut down requested (1) [ 94.393040][ T4681] device syzkaller0 entered promiscuous mode [ 94.401422][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 94.482601][ T4685] gadgetfs: bound to dummy_udc driver [ 94.521355][ T4685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.99'. [ 94.545940][ T4685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 94.747672][ T4696] device syzkaller0 entered promiscuous mode [ 94.761394][ T4334] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.772492][ C1] gadgetfs: connected [ 94.776689][ T4334] gadgetfs: disconnected [ 96.085895][ T4716] device syzkaller0 entered promiscuous mode [ 96.119756][ T4718] Zero length message leads to an empty skb [ 96.158190][ T4722] capability: warning: `syz.4.118' uses deprecated v2 capabilities in a way that may be insecure [ 96.178256][ T4720] device syzkaller0 entered promiscuous mode [ 96.212278][ T4351] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.318369][ T4726] sg_write: data in/out 39264/136 bytes for SCSI command 0x0-- guessing data in; [ 96.318369][ T4726] program syz.4.122 not setting count and/or reply_len properly [ 96.428414][ T4351] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 96.448773][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.469959][ T4351] usb 2-1: Product: syz [ 96.483154][ T4351] usb 2-1: Manufacturer: syz [ 96.491584][ T4351] usb 2-1: SerialNumber: syz [ 96.542027][ T4351] usb 2-1: USB2VGA dongle found at address 2 [ 96.555502][ T4351] usb 2-1: Allocated 8 output buffers [ 96.870409][ T4749] device syzkaller0 entered promiscuous mode [ 96.916866][ T4351] usb 2-1: Failed to early initialize device [ 96.935449][ T4351] usb 2-1: USB disconnect, device number 2 [ 97.147206][ T4756] device syzkaller0 entered promiscuous mode [ 97.296056][ T4760] CIFS mount error: No usable UNC path provided in device string! [ 97.296056][ T4760] [ 97.314585][ T4760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.525985][ T4774] FAULT_INJECTION: forcing a failure. [ 97.525985][ T4774] name failslab, interval 1, probability 0, space 0, times 0 [ 97.542104][ T4774] CPU: 0 PID: 4774 Comm: syz.2.139 Not tainted syzkaller #0 [ 97.549431][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.559528][ T4774] Call Trace: [ 97.562832][ T4774] [ 97.565790][ T4774] dump_stack_lvl+0x188/0x24e [ 97.570547][ T4774] ? show_regs_print_info+0x12/0x12 [ 97.575804][ T4774] ? load_image+0x410/0x410 [ 97.580336][ T4774] ? __might_sleep+0xd0/0xd0 [ 97.584949][ T4774] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.590014][ T4774] should_fail_ex+0x390/0x4c0 [ 97.594715][ T4774] should_failslab+0x5/0x20 [ 97.599230][ T4774] slab_pre_alloc_hook+0x59/0x300 [ 97.604273][ T4774] kmem_cache_alloc+0x56/0x2f0 [ 97.609093][ T4774] ? __proc_create+0x36f/0x8b0 [ 97.613869][ T4774] __proc_create+0x36f/0x8b0 [ 97.618477][ T4774] ? proc_symlink+0x210/0x210 [ 97.623169][ T4774] ? _raw_write_unlock+0x24/0x40 [ 97.628112][ T4774] ? proc_register+0x5d1/0x7e0 [ 97.632891][ T4774] proc_create_reg+0x87/0x100 [ 97.637585][ T4774] proc_create_net_single+0x90/0x170 [ 97.642877][ T4774] ? sockstat_seq_show+0x300/0x300 [ 97.647995][ T4774] ? proc_create_net_data_write+0x1c0/0x1c0 [ 97.653894][ T4774] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 97.659200][ T4774] ip_proc_init_net+0x84/0x130 [ 97.663994][ T4774] ops_init+0x360/0x5e0 [ 97.668163][ T4774] setup_net+0x4f2/0xbd0 [ 97.672424][ T4774] ? copy_net_ns+0x5b0/0x5b0 [ 97.677037][ T4774] ? copy_net_ns+0x324/0x5b0 [ 97.681641][ T4774] ? down_read_killable+0x1cc/0x340 [ 97.686857][ T4774] copy_net_ns+0x33e/0x5b0 [ 97.691300][ T4774] create_new_namespaces+0x3ce/0x700 [ 97.696605][ T4774] unshare_nsproxy_namespaces+0x116/0x160 [ 97.702338][ T4774] ksys_unshare+0x4f6/0x8e0 [ 97.706856][ T4774] ? sighand_ctor+0x40/0x40 [ 97.711383][ T4774] ? lock_chain_count+0x20/0x20 [ 97.716256][ T4774] ? syscall_enter_from_user_mode+0x21/0x80 [ 97.722164][ T4774] __x64_sys_unshare+0x34/0x40 [ 97.726941][ T4774] do_syscall_64+0x4c/0xa0 [ 97.731379][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 97.736075][ T4774] ? clear_bhb_loop+0x60/0xb0 [ 97.740764][ T4774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.746674][ T4774] RIP: 0033:0x7f0e4679f559 [ 97.751097][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.770797][ T4774] RSP: 002b:00007f0e4772d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.779260][ T4774] RAX: ffffffffffffffda RBX: 00007f0e46a26090 RCX: 00007f0e4679f559 [ 97.787251][ T4774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 97.795346][ T4774] RBP: 00007f0e46836b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.803331][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.811321][ T4774] R13: 00007f0e46a26128 R14: 00007f0e46a26090 R15: 00007fffd9278268 [ 97.819337][ T4774] [ 97.857693][ T4760] infiniband rxe0: set active [ 97.883742][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.987590][ T4783] device syzkaller0 entered promiscuous mode [ 98.217096][ T4790] device syzkaller0 entered promiscuous mode [ 98.423029][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.702729][ T4817] FAULT_INJECTION: forcing a failure. [ 98.702729][ T4817] name failslab, interval 1, probability 0, space 0, times 0 [ 98.720352][ T4819] device syzkaller0 entered promiscuous mode [ 98.722065][ T4817] CPU: 0 PID: 4817 Comm: syz.1.160 Not tainted syzkaller #0 [ 98.733669][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.743744][ T4817] Call Trace: [ 98.747039][ T4817] [ 98.749995][ T4817] dump_stack_lvl+0x188/0x24e [ 98.754718][ T4817] ? show_regs_print_info+0x12/0x12 [ 98.759953][ T4817] ? load_image+0x410/0x410 [ 98.764513][ T4817] ? __might_sleep+0xd0/0xd0 [ 98.769136][ T4817] ? __lock_acquire+0x7ea0/0x7ea0 [ 98.774209][ T4817] should_fail_ex+0x390/0x4c0 [ 98.778937][ T4817] should_failslab+0x5/0x20 [ 98.783486][ T4817] slab_pre_alloc_hook+0x59/0x300 [ 98.788537][ T4817] ? lockdep_softirqs_off+0x430/0x430 [ 98.793951][ T4817] ? ops_init+0x8a/0x5e0 [ 98.798249][ T4817] __kmem_cache_alloc_node+0x4f/0x270 [ 98.803662][ T4817] ? ops_init+0x8a/0x5e0 [ 98.807937][ T4817] __kmalloc+0xa3/0x240 [ 98.812118][ T4817] ? debug_mutex_init+0x34/0x70 [ 98.817029][ T4817] ops_init+0x8a/0x5e0 [ 98.821135][ T4817] setup_net+0x4f2/0xbd0 [ 98.825419][ T4817] ? copy_net_ns+0x5b0/0x5b0 [ 98.830055][ T4817] ? copy_net_ns+0x324/0x5b0 [ 98.834695][ T4817] ? down_read_killable+0x1cc/0x340 [ 98.839964][ T4817] copy_net_ns+0x33e/0x5b0 [ 98.844429][ T4817] create_new_namespaces+0x3ce/0x700 [ 98.849774][ T4817] unshare_nsproxy_namespaces+0x116/0x160 [ 98.855536][ T4817] ksys_unshare+0x4f6/0x8e0 [ 98.860082][ T4817] ? sighand_ctor+0x40/0x40 [ 98.864623][ T4817] ? lock_chain_count+0x20/0x20 [ 98.869545][ T4817] ? syscall_enter_from_user_mode+0x21/0x80 [ 98.875487][ T4817] __x64_sys_unshare+0x34/0x40 [ 98.880287][ T4817] do_syscall_64+0x4c/0xa0 [ 98.884735][ T4817] ? clear_bhb_loop+0x60/0xb0 [ 98.889442][ T4817] ? clear_bhb_loop+0x60/0xb0 [ 98.894185][ T4817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.900115][ T4817] RIP: 0033:0x7fe7d7b9f559 [ 98.904563][ T4817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.924194][ T4817] RSP: 002b:00007fe7d8a13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.932642][ T4817] RAX: ffffffffffffffda RBX: 00007fe7d7e25fa0 RCX: 00007fe7d7b9f559 [ 98.940656][ T4817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 98.948660][ T4817] RBP: 00007fe7d7c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 98.956654][ T4817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.964652][ T4817] R13: 00007fe7d7e26038 R14: 00007fe7d7e25fa0 R15: 00007ffe84dd70b8 [ 98.972683][ T4817] [ 99.064764][ T4823] device syzkaller0 entered promiscuous mode [ 99.083396][ T4825] loop4: detected capacity change from 0 to 512 [ 99.257959][ T4828] infiniband syz0: set active [ 99.262728][ T4828] infiniband syz0: added bond0 [ 99.318119][ T4828] RDS/IB: syz0: added [ 99.323646][ T4828] smc: adding ib device syz0 with port count 1 [ 99.329885][ T4828] smc: ib device syz0 port 1 has pnetid [ 99.613842][ T4838] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.649532][ T4838] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.860974][ T4844] process 'syz.4.172' launched '/dev/fd/3' with NULL argv: empty string added [ 100.436690][ T4860] device syzkaller0 entered promiscuous mode [ 100.977572][ T4891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 101.216238][ T4896] device syzkaller0 entered promiscuous mode [ 101.541788][ T4904] smc: net device lo applied user defined pnetid SYZ0 [ 101.556031][ T4907] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 101.568956][ T4907] netlink: 'syz.2.201': attribute type 2 has an invalid length. [ 101.580525][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.201'. [ 101.749719][ T4916] block device autoloading is deprecated and will be removed. [ 102.988182][ T4932] No such timeout policy "syz0" [ 104.155541][ T4914] netlink: 'syz.3.203': attribute type 6 has an invalid length. [ 104.493451][ T4958] device syzkaller0 entered promiscuous mode [ 104.756045][ T4964] device syzkaller0 entered promiscuous mode [ 105.073509][ T4987] device syzkaller0 entered promiscuous mode [ 105.494378][ T5006] tipc: Enabling of bearer rejected, failed to enable media [ 105.617998][ T4970] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 106.003828][ T5030] device syzkaller0 entered promiscuous mode [ 106.259130][ T5041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.250'. [ 106.290105][ T5041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.250'. [ 106.313951][ T5042] netlink: 'syz.0.250': attribute type 21 has an invalid length. [ 106.347507][ T5042] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.361657][ T5042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.369430][ T5042] IPv6: NLM_F_CREATE should be set when creating new route [ 106.376744][ T5042] IPv6: NLM_F_CREATE should be set when creating new route [ 106.384012][ T5042] IPv6: NLM_F_CREATE should be set when creating new route [ 106.396646][ T5046] FAULT_INJECTION: forcing a failure. [ 106.396646][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 106.410216][ T5046] CPU: 0 PID: 5046 Comm: syz.4.252 Not tainted syzkaller #0 [ 106.417549][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.427632][ T5046] Call Trace: [ 106.430936][ T5046] [ 106.433891][ T5046] dump_stack_lvl+0x188/0x24e [ 106.438614][ T5046] ? show_regs_print_info+0x12/0x12 [ 106.443866][ T5046] ? load_image+0x410/0x410 [ 106.448426][ T5046] ? __lock_acquire+0x7ea0/0x7ea0 [ 106.453491][ T5046] should_fail_ex+0x390/0x4c0 [ 106.458225][ T5046] should_failslab+0x5/0x20 [ 106.462799][ T5046] slab_pre_alloc_hook+0x59/0x300 [ 106.467887][ T5046] ? key_user_lookup+0x13f/0x450 [ 106.472872][ T5046] __kmem_cache_alloc_node+0x4f/0x270 [ 106.478291][ T5046] ? key_user_lookup+0x13f/0x450 [ 106.483273][ T5046] kmalloc_trace+0x26/0xe0 [ 106.487736][ T5046] key_user_lookup+0x13f/0x450 [ 106.492593][ T5046] key_alloc+0x11d/0x1030 [ 106.496960][ T5046] ? security_prepare_creds+0x47/0x130 [ 106.502462][ T5046] ? rcu_is_watching+0x11/0xa0 [ 106.507280][ T5046] keyring_alloc+0x41/0xa0 [ 106.511743][ T5046] lookup_user_key+0x448/0x1110 [ 106.516643][ T5046] ? lookup_user_key_possessed+0x40/0x40 [ 106.522315][ T5046] ? do_futex+0x310/0x320 [ 106.526685][ T5046] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 106.532711][ T5046] ? strncpy_from_user+0x1dc/0x340 [ 106.537891][ T5046] __se_sys_add_key+0x311/0x410 [ 106.542785][ T5046] ? __x64_sys_add_key+0xc0/0xc0 [ 106.547779][ T5046] ? lockdep_hardirqs_on+0x94/0x140 [ 106.553041][ T5046] ? __x64_sys_add_key+0x1c/0xc0 [ 106.558030][ T5046] do_syscall_64+0x4c/0xa0 [ 106.562493][ T5046] ? clear_bhb_loop+0x60/0xb0 [ 106.567203][ T5046] ? clear_bhb_loop+0x60/0xb0 [ 106.571918][ T5046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.577866][ T5046] RIP: 0033:0x7f683679f559 [ 106.582321][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.601974][ T5046] RSP: 002b:00007f6837748028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 106.610438][ T5046] RAX: ffffffffffffffda RBX: 00007f6836a25fa0 RCX: 00007f683679f559 [ 106.618445][ T5046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 106.626460][ T5046] RBP: 00007f6836836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 106.634472][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.642488][ T5046] R13: 00007f6836a26038 R14: 00007f6836a25fa0 R15: 00007ffe56019688 [ 106.650502][ T5046] [ 106.981609][ T5058] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.254' sets config #0 [ 106.992845][ T5058] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.254' sets config #1 [ 107.931578][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 107.958450][ T5072] device syzkaller1 entered promiscuous mode [ 107.966944][ T5075] FAULT_INJECTION: forcing a failure. [ 107.966944][ T5075] name failslab, interval 1, probability 0, space 0, times 0 [ 107.991294][ T5075] CPU: 0 PID: 5075 Comm: syz.4.265 Not tainted syzkaller #0 [ 107.998639][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.008719][ T5075] Call Trace: [ 108.012037][ T5075] [ 108.014991][ T5075] dump_stack_lvl+0x188/0x24e [ 108.019718][ T5075] ? show_regs_print_info+0x12/0x12 [ 108.024954][ T5075] ? load_image+0x410/0x410 [ 108.029498][ T5075] ? __might_sleep+0xd0/0xd0 [ 108.034124][ T5075] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.039200][ T5075] should_fail_ex+0x390/0x4c0 [ 108.043925][ T5075] should_failslab+0x5/0x20 [ 108.048454][ T5075] slab_pre_alloc_hook+0x59/0x300 [ 108.053515][ T5075] kmem_cache_alloc+0x56/0x2f0 [ 108.058309][ T5075] ? __proc_create+0x36f/0x8b0 [ 108.063124][ T5075] __proc_create+0x36f/0x8b0 [ 108.067737][ T5075] ? proc_symlink+0x210/0x210 [ 108.072427][ T5075] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.077463][ T5075] ? do_raw_write_lock+0x11a/0x260 [ 108.082588][ T5075] proc_create_reg+0x87/0x100 [ 108.087279][ T5075] proc_create_net_data+0x95/0x1a0 [ 108.092419][ T5075] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 108.097723][ T5075] ? proc_register+0x5d1/0x7e0 [ 108.102525][ T5075] nfs_fs_proc_net_init+0xce/0x190 [ 108.107652][ T5075] ? nfs_net_init+0x25/0x2b0 [ 108.112254][ T5075] nfs_net_init+0x222/0x2b0 [ 108.116772][ T5075] ops_init+0x360/0x5e0 [ 108.120937][ T5075] setup_net+0x4f2/0xbd0 [ 108.125200][ T5075] ? copy_net_ns+0x5b0/0x5b0 [ 108.129816][ T5075] ? copy_net_ns+0x324/0x5b0 [ 108.134419][ T5075] ? down_read_killable+0x1cc/0x340 [ 108.139636][ T5075] copy_net_ns+0x33e/0x5b0 [ 108.144078][ T5075] create_new_namespaces+0x3ce/0x700 [ 108.149382][ T5075] unshare_nsproxy_namespaces+0x116/0x160 [ 108.155114][ T5075] ksys_unshare+0x4f6/0x8e0 [ 108.159645][ T5075] ? sighand_ctor+0x40/0x40 [ 108.164157][ T5075] ? lock_chain_count+0x20/0x20 [ 108.169025][ T5075] ? syscall_enter_from_user_mode+0x21/0x80 [ 108.174959][ T5075] __x64_sys_unshare+0x34/0x40 [ 108.179750][ T5075] do_syscall_64+0x4c/0xa0 [ 108.184207][ T5075] ? clear_bhb_loop+0x60/0xb0 [ 108.188896][ T5075] ? clear_bhb_loop+0x60/0xb0 [ 108.193586][ T5075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.199503][ T5075] RIP: 0033:0x7f683679f559 [ 108.203935][ T5075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.223556][ T5075] RSP: 002b:00007f6837748028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.231978][ T5075] RAX: ffffffffffffffda RBX: 00007f6836a25fa0 RCX: 00007f683679f559 [ 108.239954][ T5075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 108.247935][ T5075] RBP: 00007f6836836b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.255928][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.263907][ T5075] R13: 00007f6836a26038 R14: 00007f6836a25fa0 R15: 00007ffe56019688 [ 108.271917][ T5075] [ 108.298522][ T5080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 108.341011][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 108.468723][ T5087] gadgetfs: bound to dummy_udc driver [ 108.752333][ T4334] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.766705][ C1] gadgetfs: connected [ 108.771010][ T4334] gadgetfs: disconnected [ 108.956100][ C1] gadgetfs: connected [ 108.971856][ T4334] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 108.980902][ T4334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 108.990225][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.007557][ C1] gadgetfs: configuration #1 [ 109.226669][ T5083] gadgetfs: suspended from state 3 [ 109.234316][ T4351] usb 1-1: USB disconnect, device number 5 [ 109.236291][ T5083] gadgetfs: disconnected [ 109.828244][ T5087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.269'. [ 109.837969][ T5091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.269'. [ 109.979954][ T5095] Bluetooth: MGMT ver 1.22 [ 110.006046][ T5097] device syzkaller0 entered promiscuous mode [ 110.043568][ T5097] tipc: Enabled bearer , priority 0 [ 110.071050][ T5097] tipc: Resetting bearer [ 110.301777][ T27] audit: type=1800 audit(1792588956.143:28): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.275" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 110.380220][ T5096] tipc: Resetting bearer [ 110.791723][ T5096] tipc: Disabling bearer [ 111.103667][ T5119] device syzkaller0 entered promiscuous mode [ 111.418331][ T5135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'. [ 111.519397][ T5142] device syzkaller0 entered promiscuous mode [ 112.011539][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 112.528744][ T5160] ip_tables: iptables: counters copy to user failed while replacing table [ 112.549454][ T5163] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 113.011372][ T4331] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.161533][ T27] audit: type=1800 audit(1792588959.043:29): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 113.237890][ T4331] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 113.371828][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.508139][ T4331] usb 1-1: Product: syz [ 113.586592][ T4331] usb 1-1: Manufacturer: syz [ 113.673145][ T4331] usb 1-1: SerialNumber: syz [ 113.800237][ T5192] device syzkaller0 entered promiscuous mode [ 113.830632][ T4331] usb 1-1: USB2VGA dongle found at address 6 [ 113.848228][ T4331] usb 1-1: Allocated 8 output buffers [ 113.876551][ T5192] tipc: Started in network mode [ 113.881630][ T5192] tipc: Node identity 5e3807e0a3d6, cluster identity 4711 [ 113.889945][ T5192] tipc: Enabled bearer , priority 0 [ 113.936355][ T5192] tipc: Resetting bearer [ 113.959062][ T5191] tipc: Resetting bearer [ 114.010092][ T5191] tipc: Disabling bearer [ 114.042239][ T5198] device syzkaller0 entered promiscuous mode [ 114.150075][ T5205] Bluetooth: MGMT ver 1.22 [ 114.161971][ T5201] device syzkaller0 entered promiscuous mode [ 114.256577][ T4331] usb 1-1: Failed to early initialize device [ 114.293150][ T4331] usb 1-1: USB disconnect, device number 6 [ 114.506638][ T5219] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 114.545346][ T5222] netlink: 48 bytes leftover after parsing attributes in process `syz.1.320'. [ 114.721333][ T27] audit: type=1800 audit(1792588960.633:30): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.318" name="c_chmask" dev="configfs" ino=36612 res=0 errno=0 [ 114.772611][ T5227] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.320'. [ 115.076685][ T5227] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 115.089722][ T27] audit: type=1800 audit(1792588960.633:31): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.318" name="UDC" dev="configfs" ino=36613 res=0 errno=0 [ 115.440549][ T5227] block (null): Could not allocate knbd recv work queue. [ 115.480695][ T5227] nbd: failed to add new device [ 115.858745][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.171218][ T4281] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 116.236914][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.251360][ T4281] Bluetooth: hci0: command 0x0c13 tx timeout [ 116.252027][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.346517][ T5236] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 116.423705][ T5248] block nbd1: not configured, cannot reconfigure [ 116.853335][ T5265] gadgetfs: bound to dummy_udc driver [ 116.890325][ T5265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.333'. [ 116.998804][ T5270] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 117.011472][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.333'. [ 117.241136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.401134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.731150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.751132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.861192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.871152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.881157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.916954][ T5266] netlink: 'syz.4.323': attribute type 6 has an invalid length. [ 117.964924][ T7] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 117.972727][ T27] audit: type=1800 audit(1792588963.143:32): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.334" name="c_chmask" dev="configfs" ino=36691 res=0 errno=0 [ 118.017481][ C0] gadgetfs: connected [ 118.150691][ T5261] gadgetfs: suspended from state 3 [ 118.156441][ T5261] gadgetfs: disconnected [ 118.187292][ T27] audit: type=1800 audit(1792588963.143:33): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.334" name="UDC" dev="configfs" ino=36692 res=0 errno=0 [ 118.636397][ T5275] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 118.724551][ T27] audit: type=1800 audit(1792588964.723:34): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.337" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 119.659666][ T5287] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 119.798918][ T5287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.911527][ T5292] bond1: (slave geneve2): making interface the new active one [ 119.950768][ T5292] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.979569][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 120.013867][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 120.038589][ T5293] device syzkaller0 entered promiscuous mode [ 120.075961][ T5293] tipc: Enabling of bearer rejected, failed to enable media [ 120.091773][ T5292] syz.3.338 (5292) used greatest stack depth: 19408 bytes left [ 120.196938][ T5310] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 120.266093][ T5312] Illegal XDP return value 16128 on prog (id 11) dev syz_tun, expect packet loss! [ 120.411568][ T27] audit: type=1800 audit(1792588966.333:35): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.347" name="c_chmask" dev="configfs" ino=36763 res=0 errno=0 [ 120.759724][ T27] audit: type=1800 audit(1792588966.343:36): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.347" name="UDC" dev="configfs" ino=36764 res=0 errno=0 [ 122.052182][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 122.215023][ T5336] device syzkaller0 entered promiscuous mode [ 122.254808][ T5336] tipc: Enabling of bearer rejected, failed to enable media [ 122.354560][ T5346] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 122.485544][ T27] audit: type=1800 audit(1792588968.473:37): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.361" name="c_chmask" dev="configfs" ino=36812 res=0 errno=0 [ 122.994230][ T27] audit: type=1800 audit(1792588968.473:38): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.361" name="UDC" dev="configfs" ino=36813 res=0 errno=0 [ 124.062043][ T5367] device syzkaller0 entered promiscuous mode [ 124.132196][ T5375] CIFS mount error: No usable UNC path provided in device string! [ 124.132196][ T5375] [ 124.163433][ T5375] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.211994][ T5375] infiniband rxe0: set active [ 124.236443][ T3599] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.319393][ T5384] rdma_rxe: already configured on bond0 [ 124.419342][ T5389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.597617][ T27] audit: type=1800 audit(1792588970.583:39): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 125.582508][ T5414] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 125.669169][ T27] audit: type=1800 audit(1792588971.663:40): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="c_chmask" dev="configfs" ino=37388 res=0 errno=0 [ 125.710099][ T27] audit: type=1800 audit(1792588971.693:41): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="UDC" dev="configfs" ino=37389 res=0 errno=0 [ 125.903266][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 125.946066][ T5434] md: md2 stopped. [ 125.980191][ T5437] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 125.989182][ T5438] rdma_rxe: rxe_register_device failed with error -23 [ 126.003825][ T5438] rdma_rxe: failed to add bond0 [ 126.084740][ T5442] device syzkaller0 entered promiscuous mode [ 126.103146][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 127.190756][ T5460] device syzkaller0 entered promiscuous mode [ 127.255535][ T5466] md: md3 stopped. [ 127.357777][ T5470] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 127.419673][ T5474] device syzkaller0 entered promiscuous mode [ 127.429267][ T5474] tipc: Enabling of bearer rejected, failed to enable media [ 127.442797][ T5477] rdma_rxe: rxe_register_device failed with error -23 [ 128.121334][ T27] audit: type=1800 audit(1792588973.513:42): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.413" name="c_chmask" dev="configfs" ino=37507 res=0 errno=0 [ 128.438503][ T5477] rdma_rxe: failed to add bond0 [ 128.464355][ T27] audit: type=1800 audit(1792588973.523:43): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.413" name="UDC" dev="configfs" ino=37508 res=0 errno=0 [ 128.586237][ T27] audit: type=1800 audit(1792588973.573:44): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.415" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 128.614206][ T27] audit: type=1800 audit(1792588974.413:45): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.415" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 129.178714][ T5510] block device autoloading is deprecated and will be removed. [ 129.869944][ T5511] gadgetfs: bound to dummy_udc driver [ 129.918366][ T5511] netlink: 48 bytes leftover after parsing attributes in process `syz.4.426'. [ 130.003574][ T5515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.426'. [ 130.130339][ T5523] device syzkaller0 entered promiscuous mode [ 130.151475][ T7] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.159200][ C0] gadgetfs: connected [ 130.181687][ T5504] gadgetfs: suspended from state 3 [ 130.188727][ T5504] gadgetfs: disconnected [ 130.267903][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.436125][ T5536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.715265][ T5531] device syzkaller0 entered promiscuous mode [ 131.873048][ T5492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.583999][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.590383][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.654305][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 132.779957][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.811009][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.825416][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.835944][ T5590] device bridge_slave_0 left promiscuous mode [ 132.845274][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.857842][ T5590] device bridge_slave_1 left promiscuous mode [ 132.877696][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.901995][ T5590] bond0: (slave bond_slave_0): Releasing backup interface [ 132.940466][ T5590] bond0: (slave bond_slave_1): Releasing backup interface [ 133.006947][ T5590] team0: Port device team_slave_0 removed [ 133.054033][ T5590] team0: Port device team_slave_1 removed [ 133.077893][ T5599] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.082824][ T5590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.104786][ T5590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.127186][ T5590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.154826][ T5590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.510935][ T27] audit: type=1800 audit(1792588979.453:46): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.464" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 134.523108][ T5621] device syzkaller0 entered promiscuous mode [ 134.731547][ T5631] tipc: Started in network mode [ 134.751855][ T5631] tipc: Node identity ba42cb6e93c6, cluster identity 4711 [ 134.792618][ T5631] tipc: Enabled bearer , priority 0 [ 134.839359][ T5632] device syzkaller0 entered promiscuous mode [ 134.903727][ T5631] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 135.032422][ T5631] tipc: Resetting bearer [ 135.076803][ T5629] tipc: Resetting bearer [ 135.158960][ T5629] tipc: Disabling bearer [ 135.181536][ T5639] device syzkaller0 entered promiscuous mode [ 136.442464][ T5685] netlink: 132 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.537967][ T5687] FAULT_INJECTION: forcing a failure. [ 136.537967][ T5687] name failslab, interval 1, probability 0, space 0, times 0 [ 136.563599][ T5687] CPU: 0 PID: 5687 Comm: syz.0.487 Not tainted syzkaller #0 [ 136.570964][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.581085][ T5687] Call Trace: [ 136.584398][ T5687] [ 136.587358][ T5687] dump_stack_lvl+0x188/0x24e [ 136.592098][ T5687] ? show_regs_print_info+0x12/0x12 [ 136.597333][ T5687] ? load_image+0x410/0x410 [ 136.601877][ T5687] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.606957][ T5687] should_fail_ex+0x390/0x4c0 [ 136.611700][ T5687] should_failslab+0x5/0x20 [ 136.616232][ T5687] slab_pre_alloc_hook+0x59/0x300 [ 136.621292][ T5687] ? key_alloc+0x346/0x1030 [ 136.625878][ T5687] __kmem_cache_alloc_node+0x4f/0x270 [ 136.631299][ T5687] ? key_alloc+0x346/0x1030 [ 136.635833][ T5687] __kmalloc_node_track_caller+0xa0/0x240 [ 136.641591][ T5687] kmemdup+0x27/0x60 [ 136.645539][ T5687] key_alloc+0x346/0x1030 [ 136.649928][ T5687] keyring_alloc+0x41/0xa0 [ 136.654390][ T5687] lookup_user_key+0x448/0x1110 [ 136.659282][ T5687] ? lookup_user_key_possessed+0x40/0x40 [ 136.665021][ T5687] ? do_futex+0x2e2/0x320 [ 136.669403][ T5687] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 136.675444][ T5687] ? strncpy_from_user+0x1dc/0x340 [ 136.680601][ T5687] __se_sys_add_key+0x311/0x410 [ 136.685489][ T5687] ? __x64_sys_add_key+0xc0/0xc0 [ 136.690461][ T5687] ? lockdep_hardirqs_on+0x94/0x140 [ 136.695690][ T5687] ? __x64_sys_add_key+0x1c/0xc0 [ 136.700658][ T5687] do_syscall_64+0x4c/0xa0 [ 136.705099][ T5687] ? clear_bhb_loop+0x60/0xb0 [ 136.709805][ T5687] ? clear_bhb_loop+0x60/0xb0 [ 136.714512][ T5687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.720440][ T5687] RIP: 0033:0x7f15fb79f559 [ 136.724903][ T5687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.744549][ T5687] RSP: 002b:00007f15fc5cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 136.753008][ T5687] RAX: ffffffffffffffda RBX: 00007f15fba25fa0 RCX: 00007f15fb79f559 [ 136.761007][ T5687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 136.769005][ T5687] RBP: 00007f15fb836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 136.777005][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.785002][ T5687] R13: 00007f15fba26038 R14: 00007f15fba25fa0 R15: 00007fff4d56bb88 [ 136.793014][ T5687] [ 137.390422][ T5693] gadgetfs: bound to dummy_udc driver [ 137.419076][ T5695] device syzkaller0 entered promiscuous mode [ 137.486458][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 137.497419][ T5693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 137.514115][ T5693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 138.811249][ T5664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.009974][ T5716] device syzkaller0 entered promiscuous mode [ 139.023792][ T5716] [ 139.026165][ T5716] ============================================ [ 139.032337][ T5716] WARNING: possible recursive locking detected [ 139.038534][ T5716] syzkaller #0 Not tainted [ 139.042963][ T5716] -------------------------------------------- [ 139.049128][ T5716] syz.2.499/5716 is trying to acquire lock: [ 139.055045][ T5716] ffff88801a32c108 (&sch->root_lock_key#107){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 139.065189][ T5716] [ 139.065189][ T5716] but task is already holding lock: [ 139.072567][ T5716] ffff88801a32c108 (&sch->root_lock_key#107){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 139.082702][ T5716] [ 139.082702][ T5716] other info that might help us debug this: [ 139.090779][ T5716] Possible unsafe locking scenario: [ 139.090779][ T5716] [ 139.098235][ T5716] CPU0 [ 139.101533][ T5716] ---- [ 139.104822][ T5716] lock(&sch->root_lock_key#107); [ 139.109948][ T5716] lock(&sch->root_lock_key#107); [ 139.115076][ T5716] [ 139.115076][ T5716] *** DEADLOCK *** [ 139.115076][ T5716] [ 139.123223][ T5716] May be due to missing lock nesting notation [ 139.123223][ T5716] [ 139.131563][ T5716] 3 locks held by syz.2.499/5716: [ 139.136595][ T5716] #0: ffffffff8d92d900 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x281/0x3810 [ 139.146571][ T5716] #1: ffff88801a32c108 (&sch->root_lock_key#107){+...}-{2:2}, at: __dev_queue_xmit+0xe46/0x3810 [ 139.157132][ T5716] #2: ffffffff8d92d900 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x281/0x3810 [ 139.167061][ T5716] [ 139.167061][ T5716] stack backtrace: [ 139.172957][ T5716] CPU: 1 PID: 5716 Comm: syz.2.499 Not tainted syzkaller #0 [ 139.180255][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.190323][ T5716] Call Trace: [ 139.193618][ T5716] [ 139.196579][ T5716] dump_stack_lvl+0x188/0x24e [ 139.201275][ T5716] ? show_regs_print_info+0x12/0x12 [ 139.206495][ T5716] ? print_deadlock_bug+0x435/0x5d0 [ 139.211759][ T5716] __lock_acquire+0x690e/0x7ea0 [ 139.216634][ T5716] ? add_lock_to_list+0x191/0x280 [ 139.221672][ T5716] ? verify_lock_unused+0x140/0x140 [ 139.226906][ T5716] ? verify_lock_unused+0x140/0x140 [ 139.232122][ T5716] ? __lock_acquire+0x36d9/0x7ea0 [ 139.237164][ T5716] ? is_bpf_text_address+0x28b/0x2a0 [ 139.242455][ T5716] lock_acquire+0x1bc/0x4a0 [ 139.246977][ T5716] ? __dev_queue_xmit+0xe46/0x3810 [ 139.252115][ T5716] ? read_lock_is_recursive+0x10/0x10 [ 139.257497][ T5716] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 139.263675][ T5716] ? rcu_read_lock_bh_held+0x76/0xf0 [ 139.268981][ T5716] ? rcu_read_lock_held+0x40/0x40 [ 139.274028][ T5716] _raw_spin_lock+0x2a/0x40 [ 139.278536][ T5716] ? __dev_queue_xmit+0xe46/0x3810 [ 139.283667][ T5716] __dev_queue_xmit+0xe46/0x3810 [ 139.288627][ T5716] ? __dev_queue_xmit+0x281/0x3810 [ 139.293749][ T5716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.299757][ T5716] ? __lock_acquire+0x7ea0/0x7ea0 [ 139.304796][ T5716] ? netdev_core_pick_tx+0x360/0x360 [ 139.310094][ T5716] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 139.316010][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 139.321226][ T5716] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.327136][ T5716] ? _raw_spin_unlock+0x40/0x40 [ 139.331996][ T5716] ? stack_trace_save+0xa6/0xf0 [ 139.336888][ T5716] ? stack_trace_snprint+0xe0/0xe0 [ 139.342032][ T5716] ? tcf_mirred_offload_act_setup+0xb00/0xb00 [ 139.348123][ T5716] sch_frag_xmit_hook+0x2a4/0x11c0 [ 139.353246][ T5716] ? kasan_set_track+0x60/0x70 [ 139.358031][ T5716] ? kasan_set_track+0x4b/0x70 [ 139.362815][ T5716] ? slab_post_alloc_hook+0x4b/0x490 [ 139.368106][ T5716] ? kmem_cache_alloc+0x18b/0x2f0 [ 139.373135][ T5716] ? skb_clone+0x1e7/0x370 [ 139.377563][ T5716] ? tcf_mirred_act+0x563/0x1640 [ 139.382533][ T5716] ? tcf_action_exec+0x174/0x590 [ 139.387490][ T5716] ? basic_classify+0x1ae/0x2c0 [ 139.392356][ T5716] ? tcf_classify+0x33e/0xbf0 [ 139.397049][ T5716] ? qfq_enqueue+0x31c/0x12c0 [ 139.401732][ T5716] ? dev_qdisc_enqueue+0x4c/0x2b0 [ 139.406773][ T5716] ? __dev_queue_xmit+0x1031/0x3810 [ 139.411986][ T5716] ? packet_sendmsg+0x3a9e/0x4c30 [ 139.417044][ T5716] ? ____sys_sendmsg+0x5ed/0x9a0 [ 139.421999][ T5716] ? mq_dump_class_stats+0x490/0x490 [ 139.427295][ T5716] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.433398][ T5716] ? __copy_skb_header+0x3ba/0x4f0 [ 139.438534][ T5716] ? memcpy+0x3c/0x60 [ 139.442532][ T5716] ? __copy_skb_header+0x3ba/0x4f0 [ 139.447668][ T5716] ? __skb_clone+0x446/0x6c0 [ 139.452278][ T5716] ? skb_clone+0x21b/0x370 [ 139.456701][ T5716] ? tcf_mirred_act+0x552/0x1640 [ 139.461661][ T5716] tcf_mirred_act+0xb1c/0x1640 [ 139.466448][ T5716] tcf_action_exec+0x174/0x590 [ 139.471232][ T5716] basic_classify+0x1ae/0x2c0 [ 139.475930][ T5716] tcf_classify+0x33e/0xbf0 [ 139.480454][ T5716] qfq_enqueue+0x31c/0x12c0 [ 139.484990][ T5716] ? sch_tree_lock+0x1b0/0x1b0 [ 139.489783][ T5716] ? do_raw_spin_lock+0x128/0x2f0 [ 139.494819][ T5716] ? __rwlock_init+0x140/0x140 [ 139.499590][ T5716] dev_qdisc_enqueue+0x4c/0x2b0 [ 139.504456][ T5716] __dev_queue_xmit+0x1031/0x3810 [ 139.509512][ T5716] ? __dev_queue_xmit+0x281/0x3810 [ 139.514648][ T5716] ? _copy_from_iter+0x5df/0x1130 [ 139.519688][ T5716] ? netdev_core_pick_tx+0x360/0x360 [ 139.524996][ T5716] ? virtio_net_hdr_to_skb+0x938/0x12b0 [ 139.530562][ T5716] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 139.536733][ T5716] ? dev_get_by_index+0x1e/0x2d0 [ 139.541680][ T5716] ? skb_put+0x10e/0x200 [ 139.545932][ T5716] packet_sendmsg+0x3a9e/0x4c30 [ 139.550809][ T5716] ? verify_lock_unused+0x140/0x140 [ 139.556023][ T5716] ? aa_sk_perm+0x81f/0x950 [ 139.560541][ T5716] ? aa_af_perm+0x340/0x340 [ 139.565058][ T5716] ? packet_getsockopt+0x980/0x980 [ 139.570192][ T5716] ? apparmor_socket_sendmsg+0x8a/0x330 [ 139.575757][ T5716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 139.581049][ T5716] ? security_socket_sendmsg+0x7c/0xa0 [ 139.586526][ T5716] ? packet_getsockopt+0x980/0x980 [ 139.591657][ T5716] ____sys_sendmsg+0x5ed/0x9a0 [ 139.596432][ T5716] ? __sys_sendmsg_sock+0x30/0x30 [ 139.601464][ T5716] ? __import_iovec+0x306/0x510 [ 139.606342][ T5716] ? import_iovec+0x6f/0xa0 [ 139.610861][ T5716] ___sys_sendmsg+0x2a2/0x360 [ 139.615544][ T5716] ? __sys_sendmsg+0x2a0/0x2a0 [ 139.620343][ T5716] __se_sys_sendmsg+0x1c3/0x2b0 [ 139.625202][ T5716] ? __x64_sys_sendmsg+0x80/0x80 [ 139.630155][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 139.635369][ T5716] do_syscall_64+0x4c/0xa0 [ 139.639798][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 139.644484][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 139.649204][ T5716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.655109][ T5716] RIP: 0033:0x7f0e4679f559 [ 139.659533][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.679152][ T5716] RSP: 002b:00007f0e4774e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.687580][ T5716] RAX: ffffffffffffffda RBX: 00007f0e46a25fa0 RCX: 00007f0e4679f559 [ 139.695567][ T5716] RDX: 0000000000004005 RSI: 0000200000000540 RDI: 0000000000000006 [ 139.703545][ T5716] RBP: 00007f0e46836b20 R08: 0000000000000000 R09: 0000000000000000 [ 139.711526][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.719503][ T5716] R13: 00007f0e46a26038 R14: 00007f0e46a25fa0 R15: 00007fffd9278268 [ 139.727483][ T5716] [ 139.800704][ T5722] device syzkaller0 entered promiscuous mode