last executing test programs: 12.593839258s ago: executing program 4 (id=564): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) 8.873151498s ago: executing program 4 (id=576): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48d0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) unshare(0x20000400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x1, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 5.749580118s ago: executing program 1 (id=585): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.723621648s ago: executing program 4 (id=587): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x3, {0x2, 0x8, 0x0, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 4.293502121s ago: executing program 0 (id=590): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fusebl\x01\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='#-!-U^-\'\\\x00', &(0x7f0000000680)=':!:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x04', &(0x7f0000000080)='&k\xa4\x89\x04\x94\xa8\xc5b\x18/)\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\x1c@\\\x00\xd8\x91\xc6\x90\x06cFg\x9dCQt U\xd2\xca\x8e\x1c\xe4\xb8\xa2\xb7\xaf\xeci_\x0e\xf6\xdf\xa7\xf7\x8d\xd0\xab\x02\xc0\xcf\xcaf8\xa2\xf6\x92\x92\x7fu\x93m*U(=\xf5\xa2\x94G7K$\xdbmq\xa0>\xf7\xd5\a\xf7n\xf9\xe0\xc4\xf7\xd7\xdd\x82N\x84#&\xb5g\xd4W\xd4\x03\xef\x19\x00d\x1a\x7f-\v\xa3w\x03h\x9f\\\xa2b\xabS`\xf7\xb5\x94\x89\xd7\xbe:\xe6\x8d\x94\xd47\x068\xd3\xeaA\x1d\xe0I$\xc87\xfc\"\xde\"\x15\x9c\x1c\xbb\xbdDM\xc7\xf2\xddN\'\x94g\xec\xcc\xb3\xbbb\x86\x1b\x8c]6r\vm\x1f\xc3%\x10 \xe3\xb4\xd9\x1a\x91\x05\xcd\xeapJ\xfd\xb1\v\xb2\xa1I\xc9\x11c\xdap\xe5\xe8&A\xe1~O\xaen\x1b\xae\x1b\x12\xc2\n\x1d\xb8\x16\x82\x0f\x15i\xf4\xf4\xa0;H\xab\x8f\xc5\xdc\x00\xc9kI\x8d\xb4\xdc\x82o\xf9c(\xbe\xcd|#\xa2\xc4# O\b\xce\xcf\xb4\x1d\x03\xea9\x05\x90gA\x81\xa5\xb2r\x8eY\x10\x9140U\xb2\a0\x9a\x9f0{\xffF\xc5\x89\x0eK$AFt\xdd\xf8\xa6!S \xabB\xa5\xcc\xe9\xb4W~(eq\xe52\x0f`\xc0#\x8b\x99\xf2\xf1j\x81\xd4\xa6\x88kK\xf1\xe7\x90\x13!H\x1e4a\x1a\x15\xd9\xe91\xe2j_-F\x1c\xff\xff\xe7\xd7V^v\xc0\x84s\xb4\xb9v\xd7\x8d\xe2\x81;\xcf\x16IyI3W\xc5hM^\xf9\xcf\x81\xf6\xa9^4\xb3\x7f*\xfa\xd4M\xa5\xd4\xa2\xb9Q8\xaca\xbaXf\xeb\x00l\xb6\x01\x8c=JQ\xdb\xc7\x92\xf6\xd5:\xc2\xf4\x81\t\x95\a\x84\x85\x1e\x8fO\x8e\x13\x8f6\x19Bi\xa5\xf5\xc2\x81\x9c\x01\x00\x11\xcf\xe4:S\x93', &(0x7f00000002c0)='\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='Quseblk\x00', &(0x7f0000000c00)='\f\x1e\xe5\x8c\xa4k&U[\xa1\xba\x90\xda\x16E\xff\xf9\x8dH\xb2\xf8\x06V\x03q^\x88\x1b\xd02\xf7\x18\xef\xcd\x8a\x16\x03M\xdcz\xaa]e\xe7\x9e:\xab\xdbj\xf0\x94)\xd1\xfcq\x97\x90 T\xba\xa2\xe5zZy\'*d\xa6\xe07\x9b\xd8`\xe3\xc7\xa4\x19%L\xf4&\x90\xcf\x85\x01\xf0b\x13v\x1e\x15\xad\x9e\x12\x97%)u\xe3\xc9DN\x99p\xf7\x86\x95\xc6\xd7\x8b>v\xf2\xf5W\x89Fi\x8ex\xaa\xb6GMh\x1c\xf9* \xf8\xa3c\xbc#D1\t(gH>D\xaa\x86\x0f\x9c\x97u\xd1\xcc\xd2\xc1\xd6&c\xf4sI\xf0\x99\x0fd5\xd2\x0e9\xf2\xc3\xdc\x80\xd9\rD\x11%3\xd7\r*N\x18\xb7\xd1\xd4\xa5\x87\x818\xcf\xb7\xaeq=5@>\xd1\xe67\x18\x03\xce:1\x114\f\x97\xd0\xee\x18\xffl4T\xf1\t\x98\x8c\x90\xfb\x8d\x10}=\x00\xd4yn\xbe\xc6\tlT\xbd)wRz,X\xd0\xee5\xe1Q\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 3.407743665s ago: executing program 0 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0xfffffffffffffffe, {0x3, 0x0, 0x4}}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r7, 0x2, {0x1, 0xff, 0x3}, 0x1}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r1, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 2.49681795s ago: executing program 4 (id=596): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.48589049s ago: executing program 1 (id=597): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)=0x6a) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000002200)={0x0, 0x2, 0x107, 0xfffffffffffffffd, 0xffffffffffffffff}) flock(r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x11c, 0x4800, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}]}, 0x2c}}, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000640)="dd01ffc2eb4d8ddd", 0x8}], 0x1) 2.430808191s ago: executing program 0 (id=598): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2cc, &(0x7f0000000d40)="$eJzs3U1rE0Ecx/HfbNI2taFua0XwWC3oRWq9iJcUyYsQD6I2EYqholZQL63iSUTv3n0LXnwBghfFN+DNky8gnlZmdvKwyW42lnbT0O8HLJPdmZ3/dB9m/gG7AnBi3az/+nTtt/1npJJK0tsbUiCpIpUlndW5yrOd3e3dVrMx4jjtyLGtjOKWZqjS1k4zrW1FvoUX2k9lVfu34WhEUbQ5fKJw0ri7P0Ugzfm70+2vFB7ZaK8O2G7/kOOYNqattp5rcdJxAAAmy8//gZ/nq379HgTSmp/2j+X8P75k5O2JxVGUaOTevvnfZVmRsef3tNvVy/dcZmD3B50scZyeZwY+zyq+shILTJOXVbpYgvkH263mla1HrUag16p5fdVW3M9GfOl25ES7mpKbjjDG2E36inLBjWHGjmEjI/4zB+zxwMw388PcMaE+qtFd/5UjY0+TO1PhwJmK41/PPqIbZWhryT82arVakKiy5Do573vwckZZSc9I1LmilpT8giDMi9O1Wh5oFY/uamajL1VfsK025xOtNjqfMvpaSfRlR9O9mrOjPGrmvbllVvVHn1XvW/8HNr41jbwze3eNWYsfqO43Ho9nNr27sjtmODRz7Ot2Nbml+1ucywr97+hnGgbsSZrP2PdO93Vdi09fvHxYarWaT2zhXkrhcbW7ZeaNlFpnwgXt97bMKf4icqhyZ1IqMrDLh3pA+/zIrWzvskIGeCyvhKIK9e/FXkiTKBT4nMLE9E56btWvhQSEorl1V5z/9eUr626xZ3+EI9bpuQsyf8TIrrG7GVAl0X7ZlU79V26wkJ3BjZtzXbgkXRy/x9DHOR2ivZwKpq6fusv3/wAAAAAAAAAAAAAAAAAAANOmiP9OMOkxAgAAAAAAAAAAAAAAAAAAAAAw7brv/1Xn/b8a7/2/g3/5uxS/4eVQ3v/7YUe8/xc4ev8CAAD//zOsiI4=") r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x10000a47) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) sendto$inet(r3, &(0x7f00000004c0)="ab", 0x1, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 2.429578711s ago: executing program 1 (id=599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x80000000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) 2.384984101s ago: executing program 3 (id=600): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) fallocate(r2, 0x0, 0x0, 0x40002) fallocate(r1, 0x8, 0x2000, 0x40000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000440)='X', 0x1}], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x2, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) 2.350299333s ago: executing program 2 (id=601): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.339714023s ago: executing program 1 (id=602): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x4846, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2cc, &(0x7f0000000d40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) setresgid(0xee00, 0xee01, 0x0) r1 = getegid() setresgid(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4660fddac428cf36f2dca49b9192f3a3bc231f4019b3c8dad540e7f64525f09d1baff43a7b299de7f737949dedbd435f5ac4599293d0a0f8b8d9069d944dbc5981c8bdeef7b7de1ddfbcae4eae464653c13c3688dd425546932d621f0460cc57ee72621aeb475e89d87ba221714f901fb76d649bc0ff90097a85f33f09302cb7fa1f694d75f1ca55f9d0c808ee208c55584ce490320a5397ee1455a8d930b3ba574f2c4e43d0cdc1c3cff601f0774c543b4b11e40f7c3e0694bfb2d1d20b3397fdf57000"/210, @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8b}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000035c0)={0x2020}, 0x2020) 2.283202853s ago: executing program 3 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000f80)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c9, &(0x7f0000001900)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x2, 0x0, 0x5}) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x80800}, 0x20000814) 2.202908615s ago: executing program 2 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x2, 0x84, 0x804, 0x8000, 0x0, 0x200}, @arp=@generic={0x30d, 0x6558, 0x6, 0xf, 0x9, @remote, "a87a550b1d86934abccb431c1ed992", @remote, "0d5156ab0197a1ff"}}, 0x35) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 2.191159415s ago: executing program 3 (id=605): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$unix(r0, &(0x7f0000000300)=@abs={0x21, 0x0, 0x4e22}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) connect$vsock_stream(r2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.170562465s ago: executing program 4 (id=606): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2.164842585s ago: executing program 1 (id=607): r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000005000000cc"], 0x42) write$tun(r1, &(0x7f00000013c0)={@val={0x0, 0x6007}, @val={0x1, 0x4, 0xfff9, 0x7, 0x6, 0x7f}, @mpls={[], @ipv6=@tcp={0x3, 0x6, "0a9717", 0x57, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x88, 0x916, 0x0, 0x6}, {"ea52557898d18f1f0b30f1b4164a9a665195d8b7bdf0d4b8db866e4fcf6ebc98cfb081a19687450a8f2942bbb34974cf1afd1e80fc73873fc91fffd5ac32f13eea80d0"}}}}}}, 0x8d) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e2, &(0x7f0000000140)="ba") connect$inet6(r2, &(0x7f0000001080)={0xa, 0x4e23, 0x8000, @private1}, 0x1c) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) 2.109584946s ago: executing program 2 (id=608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 416.251884ms ago: executing program 2 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r5 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xe0}) close_range(r5, 0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 415.600794ms ago: executing program 3 (id=610): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x484}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0xc27a, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x5, 0x128, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0x1, 0xe, 0x3}], 0x10, 0x4, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x65]}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6283, 0x1, 0xeb, 0x1}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 344.108255ms ago: executing program 0 (id=611): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x6) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 250.396906ms ago: executing program 1 (id=612): socket$kcm(0x10, 0x2, 0x0) read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 180.257297ms ago: executing program 2 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 179.847367ms ago: executing program 4 (id=614): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000022c0)=ANY=[], 0xff, 0x6de, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c140, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='pids.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x52142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 179.489947ms ago: executing program 3 (id=615): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x1, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r1, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r1, 0x60000000000, 0x1000000000000000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000800)=r2}, 0xfffffffffffffeb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 127.281758ms ago: executing program 0 (id=616): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x9}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000004c00)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x7ff}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdf8c}]}, 0x3c}}, 0x0) 74.547119ms ago: executing program 3 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @local}], 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 330.91µs ago: executing program 2 (id=618): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x7a, 0x5, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @private2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r0, 0x2f, 0xe8, 0x7f, 0x0, 0x38, @private1, @private1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)) pipe2$watch_queue(0x0, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003180)={0x1fc}, 0x8) openat2(0xffffffffffffffff, &(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x10080, 0x8, 0x25}, 0x18) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f0000003300)={0xa, 0x4e23, 0x8, @loopback, 0x3}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000003340)="8499d04c4e5cbf44425a64f6c9c17d3abaef7af0eebb0431ece6310379e3ef3779c35d0dcca886cd6cb951c0757a3c6fff15287c53012e45747126e6676a0c935bdf78fb9fadd3f4a1d1849e04c382685a4514902e4441d35b98938f1f8daf15", 0x60}, {0x0}, {&(0x7f00000034c0)="1037f62d1e7e013697a0da632720886e990a51826b42bb52d8493c5e2c2c497be8f5aaa90a9c0ba97efaab24253c99eec5e05798cc46955df4ab05de864235c8d03ba4b64fa5df11ddbe62a99df6701db39ace6ff51f92de41be08aeac1fcdcf992e14ecd478ab6e20e99958c2acf95c767b06c980ab711148dde22c21d8160bfcedc7fc46c2ed9d19c7310cba0d12870b79fc1c0981a84d14d89309f4593d1d84b77c7ec62e3856d1027143f2bfa17b93dd1f20be2ccc3f1640aa50e5851c42b9de71c562ab8d193c442f3dfe203ef3", 0xd0}, {&(0x7f00000035c0)="86ee251cc73a90f85eeee0516eb71bc7c9f9f9d65b866ecd8ce4595e2281958a2c893c03ef0fb2aee44abe1f404f410ca32c78a6a677c7b5ea5ebec4a3d16237a9a8326116", 0x45}, {&(0x7f00000036c0)="ed332759cea5186e4c50ba862e339ecc8f8f9fee2a85737d967ed86176ded539aa5182b5db800c5651900b6a152d98c2cf9dcea543ab0250f4a8310a74573ed61d458eac81dd4d42b8437f4b92ef90a7035ac6ec67c71285ea21ac5367abe4df9eeece757c595a33ea627bc80ad300b9b32430ae0aab9b7e80d0ef961f7730255d21e049851c6c27e6f0a4d203f70387a6aa975e008c44ec56129b0577c8c64d89403df880f9d57454b6b87012f19a0f7a4f1e82f4f304d4993f2f8241e827d551f8a9f0f48b1b37b3e04b8bd166fba2eab2b1bbfc0f054a9f2ce6b1c727b226ec16240d", 0xe4}, {0x0}, {&(0x7f0000003840)="6f19c11825233f20cd4899ebafc5545065cc3b3bfece955c5ad5c10d73b015a313bab5c33e51900b3be079e6ab9394519c2bcbfc39ecc826987c5f93d828e673702f91b9c72b12f4f2c94d31009746018a6a4cc5b93298fcab4c46fd10c0ac6485d4d0f540bb13ca50a0a46db987fb11793b6cfa28f95e517a137c40e790ab84599f75d8b16133a7b3a7c7c5286bbbb9bff7fef426124a5f7ef92a0a07d47d50ead976b58eff12adf2", 0xa9}], 0x7, &(0x7f0000003980)=[@dontfrag={{0x14}}], 0x18}, 0x4) r2 = mq_open(&(0x7f0000000040)='\xf0L\xd8\x17', 0x40, 0xa, &(0x7f0000000080)={0x8001, 0x8, 0x7}) finit_module(r2, 0x0, 0x0) 0s ago: executing program 0 (id=619): socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200), 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012000000000000000006610000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7001e"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="18000000010003", 0x7) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x44, r6, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x9}}, 0x1c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40094) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 42.874061][ T4024] cgroup: Unknown subsys name 'net' [ 43.224149][ T4024] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.522092][ T4024] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.922397][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 44.933021][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 44.971517][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 45.002891][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 45.034459][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.036490][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.039930][ T4034] device bridge_slave_0 entered promiscuous mode [ 45.047041][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.049193][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.051880][ T4034] device bridge_slave_1 entered promiscuous mode [ 45.093337][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.095424][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.098514][ T4044] device bridge_slave_0 entered promiscuous mode [ 45.103797][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.105921][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.109024][ T4044] device bridge_slave_1 entered promiscuous mode [ 45.121577][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.126701][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 45.147084][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.162141][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.193533][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.216940][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.222884][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.225574][ T4040] device bridge_slave_0 entered promiscuous mode [ 45.231156][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.233156][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.235822][ T4035] device bridge_slave_0 entered promiscuous mode [ 45.240294][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.242299][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.245065][ T4035] device bridge_slave_1 entered promiscuous mode [ 45.256067][ T4034] team0: Port device team_slave_0 added [ 45.261174][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.263384][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.266246][ T4040] device bridge_slave_1 entered promiscuous mode [ 45.276746][ T4044] team0: Port device team_slave_0 added [ 45.283298][ T4034] team0: Port device team_slave_1 added [ 45.286380][ T4044] team0: Port device team_slave_1 added [ 45.329264][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.331883][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.333891][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.336476][ T4043] device bridge_slave_0 entered promiscuous mode [ 45.342069][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.356117][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.363840][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.365924][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.368797][ T4043] device bridge_slave_1 entered promiscuous mode [ 45.372765][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.376247][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.378777][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.386046][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.390606][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.392760][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.400882][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.424767][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.426702][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.434375][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.438760][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.440685][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.454263][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.475845][ T4035] team0: Port device team_slave_0 added [ 45.485533][ T4040] team0: Port device team_slave_0 added [ 45.489774][ T4040] team0: Port device team_slave_1 added [ 45.493520][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.502137][ T4035] team0: Port device team_slave_1 added [ 45.515768][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.518193][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.525520][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.538521][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.552688][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.554695][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.562379][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.572521][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.574694][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.582312][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.602556][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.604640][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.617445][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.689602][ T4044] device hsr_slave_0 entered promiscuous mode [ 45.737857][ T4044] device hsr_slave_1 entered promiscuous mode [ 45.779472][ T4043] team0: Port device team_slave_0 added [ 45.829323][ T4034] device hsr_slave_0 entered promiscuous mode [ 45.867794][ T4034] device hsr_slave_1 entered promiscuous mode [ 45.917613][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.919911][ T4034] Cannot create hsr debugfs directory [ 45.928729][ T4043] team0: Port device team_slave_1 added [ 45.989355][ T4035] device hsr_slave_0 entered promiscuous mode [ 46.027719][ T4035] device hsr_slave_1 entered promiscuous mode [ 46.077601][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.079903][ T4035] Cannot create hsr debugfs directory [ 46.189265][ T4040] device hsr_slave_0 entered promiscuous mode [ 46.227891][ T4040] device hsr_slave_1 entered promiscuous mode [ 46.267509][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.269593][ T4040] Cannot create hsr debugfs directory [ 46.271889][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.273854][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.281568][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.304831][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.306844][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.314285][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.419451][ T4043] device hsr_slave_0 entered promiscuous mode [ 46.477803][ T4043] device hsr_slave_1 entered promiscuous mode [ 46.527598][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.529947][ T4043] Cannot create hsr debugfs directory [ 46.667995][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 46.669734][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 46.671623][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 46.715339][ T4034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.747554][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 46.749668][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 46.761164][ T4034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.820430][ T4034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.869746][ T4034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.948276][ T4044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.990000][ T4044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.029154][ T4044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.090431][ T4044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.191316][ T4035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.251858][ T4035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.291154][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.304672][ T4035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.364773][ T4035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.431908][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.435359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.439512][ T4043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.484490][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.488307][ T4043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.548977][ T4043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.589580][ T4043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.645067][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.648131][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.651118][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.653220][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.669768][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.672705][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.675732][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.679000][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.680942][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.686205][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.697012][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.705429][ T4040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.741616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.752018][ T4040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.789744][ T4040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.844343][ T4040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.890218][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.892843][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.895405][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.900727][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.904448][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.915289][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.918303][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.921531][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.927269][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.931769][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.954398][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.958008][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.960775][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.963963][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.966590][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.968621][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.974173][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.993470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.996183][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.000820][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.003464][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.005386][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.007884][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.031010][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.054851][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.060411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.063435][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.066334][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.074956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.085222][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.088891][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.101546][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.104536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.121514][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.124490][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.139410][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.146001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.166928][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.170157][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.178367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.180669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.184834][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.199111][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.201932][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.204657][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.206620][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.211694][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.219363][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.222592][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.225185][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.236198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.239653][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.241626][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.255714][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.258845][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.264454][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.273285][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.288201][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.304688][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.306903][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.309950][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.312911][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.315521][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.317639][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.321011][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.337253][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.340842][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.343712][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.350980][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.354461][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.357048][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.359062][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.362800][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.365804][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.382038][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.384933][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.397146][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.402124][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.404824][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.409798][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.420240][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.423266][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.425995][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.429490][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.432056][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.439399][ T4034] device veth0_vlan entered promiscuous mode [ 48.445800][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.448412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.451679][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.456989][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.470460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.474400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.495946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.505443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.509418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.523745][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.526509][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.539497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.542424][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.545363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.549639][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.553672][ T4034] device veth1_vlan entered promiscuous mode [ 48.566243][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.569518][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.572196][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.575384][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.578283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.581276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.583926][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.591293][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.606093][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.613613][ T4044] device veth0_vlan entered promiscuous mode [ 48.623810][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.629719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.632576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.634922][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.637961][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.640918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.643733][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.645752][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.650935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.665382][ T4044] device veth1_vlan entered promiscuous mode [ 48.677012][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.680412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.683326][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.687114][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.691608][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.694336][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.696200][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.709039][ T4034] device veth0_macvtap entered promiscuous mode [ 48.726669][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.730381][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.733081][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.739242][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.748019][ T4082] Bluetooth: hci2: command 0x041b tx timeout [ 48.749855][ T4082] Bluetooth: hci1: command 0x041b tx timeout [ 48.753945][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.756908][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.759727][ T4082] Bluetooth: hci0: command 0x041b tx timeout [ 48.764892][ T4034] device veth1_macvtap entered promiscuous mode [ 48.777887][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.780620][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.783661][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.804792][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.809893][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.813076][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.815999][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.819803][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.824315][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.827925][ T4082] Bluetooth: hci3: command 0x041b tx timeout [ 48.829798][ T4082] Bluetooth: hci4: command 0x041b tx timeout [ 48.836617][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.841753][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.844845][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.849011][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.851963][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.867656][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.870488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.873994][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.876817][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.882198][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.888958][ T4034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.891428][ T4034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.893825][ T4034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.896234][ T4034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.904876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.909074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.924377][ T4044] device veth0_macvtap entered promiscuous mode [ 48.927104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.930886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.933375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.935863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.944661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.966361][ T4035] device veth0_vlan entered promiscuous mode [ 48.973857][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.983226][ T4044] device veth1_macvtap entered promiscuous mode [ 49.005952][ T4035] device veth1_vlan entered promiscuous mode [ 49.056558][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.059737][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.062674][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.065482][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.075388][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.102525][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.105909][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.110977][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.117961][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.120720][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.123717][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.126628][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.131524][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.139820][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.142772][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.153101][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.156808][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.167367][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.171574][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.174142][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.176494][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.188591][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.193192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.195645][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.198921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.201856][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.204724][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.211663][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.216183][ T4035] device veth0_macvtap entered promiscuous mode [ 49.244590][ T4035] device veth1_macvtap entered promiscuous mode [ 49.294366][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.297077][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.301145][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.348117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.351108][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.355633][ T4118] loop1: detected capacity change from 0 to 164 [ 49.385965][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.391868][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.394628][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.398103][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.402397][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.435481][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.441597][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.445225][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.449741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.453070][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.455827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.469159][ T4043] device veth0_vlan entered promiscuous mode [ 49.481379][ T4043] device veth1_vlan entered promiscuous mode [ 49.495902][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.500759][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.503571][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.506355][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.510731][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.516295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.531333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.535616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.536989][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.540358][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.544073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.553091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.556061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.561860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.565529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.576208][ T4035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583054][ T4035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.585431][ T4035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.591054][ T4035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.755709][ T4040] device veth0_vlan entered promiscuous mode [ 49.774890][ T4040] device veth1_vlan entered promiscuous mode [ 50.554311][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.557179][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.560080][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.585522][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.586031][ T4043] device veth0_macvtap entered promiscuous mode [ 50.594373][ T4043] device veth1_macvtap entered promiscuous mode [ 50.596922][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.606724][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.610283][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.612988][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.616683][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.620349][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.623223][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.628846][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.652913][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.655236][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.693874][ T4126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.696084][ T4126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.799039][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.801902][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.804865][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.809010][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.811752][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.814606][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.818632][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.821411][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.824162][ T1825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.827979][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 50.830101][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 50.832458][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 50.837018][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.841165][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.844153][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.847236][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.856418][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.869656][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.574500][ T25] Bluetooth: hci4: command 0x040f tx timeout [ 51.576389][ T25] Bluetooth: hci3: command 0x040f tx timeout [ 51.581660][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.632475][ T4040] device veth0_macvtap entered promiscuous mode [ 51.646393][ T4040] device veth1_macvtap entered promiscuous mode [ 51.661100][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.664891][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.670441][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.677761][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.680914][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.683805][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.752437][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.755025][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.771769][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.774312][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.882565][ T4136] loop3: detected capacity change from 0 to 764 [ 51.900380][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.903681][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.906392][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.909545][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.912581][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.915851][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.919773][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.922674][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.927016][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.948704][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.267031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.757636][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.761138][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.795353][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.804941][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.827401][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.830405][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.833078][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.835785][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.865147][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.875534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.891756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.907741][ T4082] Bluetooth: hci2: command 0x0419 tx timeout [ 52.909896][ T4082] Bluetooth: hci1: command 0x0419 tx timeout [ 52.911739][ T4082] Bluetooth: hci0: command 0x0419 tx timeout [ 52.936946][ T4040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.950993][ T4040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.953551][ T4040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.955881][ T4040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.052883][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.055228][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.074038][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.134180][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.137170][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.157227][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.184723][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.187142][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.204354][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.252692][ T4126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.255254][ T4126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.264132][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.498235][ T26] audit: type=1326 audit(53.470:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.528562][ T26] audit: type=1326 audit(53.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.543202][ T26] audit: type=1326 audit(53.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.574789][ T26] audit: type=1326 audit(53.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.581251][ T26] audit: type=1326 audit(53.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.588097][ T26] audit: type=1326 audit(53.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.594046][ T26] audit: type=1326 audit(53.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.601034][ T26] audit: type=1326 audit(53.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.606930][ T26] audit: type=1326 audit(53.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.613498][ T26] audit: type=1326 audit(53.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4156 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 53.628729][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 53.630585][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 54.508706][ T4166] loop0: detected capacity change from 0 to 256 [ 56.112429][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ae3770b2: rx timeout, send abort [ 56.367048][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b518aca6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.371608][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ae3770b2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.705732][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 57.199555][ T4197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 57.939001][ T4199] netlink: 'syz.1.23': attribute type 3 has an invalid length. [ 57.942428][ T4199] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 57.944525][ T4199] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.23'. [ 58.547303][ C1] sched: RT throttling activated [ 58.635844][ T4205] udc-core: couldn't find an available UDC or it's busy [ 58.650592][ T4209] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 58.654462][ T4205] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.687206][ T4208] loop2: detected capacity change from 0 to 2048 [ 58.694330][ T4083] libceph: connect (1)[c::]:6789 error -101 [ 58.696442][ T4083] libceph: mon0 (1)[c::]:6789 connect error [ 58.707139][ T4083] libceph: connect (1)[c::]:6789 error -101 [ 58.714144][ T4083] libceph: mon0 (1)[c::]:6789 connect error [ 58.757543][ T4208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.791157][ T4208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 58.821335][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 58.968551][ T4081] libceph: connect (1)[c::]:6789 error -101 [ 58.970342][ T4081] libceph: mon0 (1)[c::]:6789 connect error [ 60.991623][ T4081] libceph: connect (1)[c::]:6789 error -101 [ 60.993457][ T4081] libceph: mon0 (1)[c::]:6789 connect error [ 61.024236][ T4230] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 61.027816][ T4209] ceph: No mds server is up or the cluster is laggy [ 61.124165][ T4232] netlink: 'syz.1.34': attribute type 5 has an invalid length. [ 62.701391][ T4250] loop4: detected capacity change from 0 to 1024 [ 62.721015][ T4252] loop3: detected capacity change from 0 to 512 [ 64.009014][ T4260] Zero length message leads to an empty skb [ 64.112079][ T4266] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 64.151212][ T4266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 64.234725][ T4269] loop4: detected capacity change from 0 to 1024 [ 64.290112][ T4271] netlink: 104 bytes leftover after parsing attributes in process `syz.0.48'. [ 64.811453][ T4279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.754148][ T4269] EXT4-fs (loop4): Ignoring removed orlov option [ 66.756017][ T4269] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 66.818211][ T4269] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 67.689961][ T4295] binder: 4294:4295 tried to acquire reference to desc 0, got 1 instead [ 67.693697][ T4295] binder_alloc: 4294: pid 4294 spamming oneway? 1 buffers allocated for a total size of 4096 [ 67.701351][ T4086] binder: undelivered TRANSACTION_COMPLETE [ 67.713521][ T4086] binder: undelivered transaction 5, process died. [ 69.561363][ T4312] udc-core: couldn't find an available UDC or it's busy [ 69.563507][ T4312] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.630333][ T1960] cfg80211: failed to load regulatory.db [ 69.636609][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.641244][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.655352][ T4310] loop2: detected capacity change from 0 to 8 [ 69.719671][ T4310] Filesystem uses "unknown" compression. This is not supported [ 69.965918][ T4319] loop4: detected capacity change from 0 to 4096 [ 70.096490][ T4319] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 70.104964][ T4327] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 70.196384][ T4319] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 70.235637][ T4332] loop0: detected capacity change from 0 to 512 [ 70.251704][ T329] ntfs3: loop4: ino=1b, Internal error [ 70.254252][ T329] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 70.286428][ T4332] EXT4-fs (loop0): Value of option "test_dummy_encryption=discard" is unrecognized [ 70.557461][ T4337] fuse: root generation should be zero [ 76.127848][ T4379] xt_TCPMSS: Only works on TCP SYN packets [ 76.186189][ T4382] loop4: detected capacity change from 0 to 128 [ 76.232697][ T4382] EXT4-fs (loop4): Ignoring removed nobh option [ 76.309702][ T4382] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 76.326750][ T4387] loop2: detected capacity change from 0 to 1024 [ 76.368025][ T4387] ======================================================= [ 76.368025][ T4387] WARNING: The mand mount option has been deprecated and [ 76.368025][ T4387] and is ignored by this kernel. Remove the mand [ 76.368025][ T4387] option from the mount to silence this warning. [ 76.368025][ T4387] ======================================================= [ 76.484078][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.484362][ T4402] loop1: detected capacity change from 0 to 512 [ 76.552971][ T4387] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.561274][ T4387] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 76.565892][ T4387] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.565892][ T4387] [ 76.571299][ T4387] EXT4-fs (loop2): Total free blocks count 0 [ 76.573286][ T4387] EXT4-fs (loop2): Free/Dirty block details [ 76.575143][ T4387] EXT4-fs (loop2): free_blocks=4293918720 [ 76.577182][ T4387] EXT4-fs (loop2): dirty_blocks=64 [ 76.578885][ T4387] EXT4-fs (loop2): Block reservation details [ 76.580855][ T4387] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 76.619689][ T4402] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 76.740421][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 76.756101][ T4402] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,noquota,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 76.824701][ T4413] binder: 4412:4413 tried to acquire reference to desc 0, got 1 instead [ 76.841173][ T4413] binder: 4412:4413 got transaction with invalid handle, 2 [ 76.856344][ T4413] binder: 4412:4413 transaction failed 29201/-22, size 96-24 line 3242 [ 76.875167][ T4085] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.927703][ T4416] loop2: detected capacity change from 0 to 8 [ 76.956475][ C1] vcan0: j1939_tp_rxtimer: 0x000000000b0605f1: rx timeout, send abort [ 77.142438][ T4416] unable to read inode lookup table [ 77.701778][ C1] vcan0: j1939_tp_rxtimer: 0x000000000b0605f1: abort rx timeout. Force session deactivation [ 77.909644][ T4421] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 78.037761][ T4427] loop4: detected capacity change from 0 to 16 [ 78.048698][ T4424] loop1: detected capacity change from 0 to 512 [ 78.056027][ T4421] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 78.061118][ T4424] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 78.064353][ T4424] EXT4-fs (loop1): Unrecognized mount option "inlinecrypt.." or missing value [ 78.122177][ T4427] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.158339][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 78.158356][ T26] audit: type=1326 audit(531.123:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7fc00000 [ 78.527262][ T4438] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 78.530508][ T4438] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 78.542010][ T4438] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 78.544889][ T4438] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 78.552364][ T4438] attempt to access beyond end of device [ 78.552364][ T4438] loop4: rw=524288, want=312, limit=16 [ 78.557426][ T4438] attempt to access beyond end of device [ 78.557426][ T4438] loop4: rw=524288, want=1049280, limit=16 [ 78.564695][ T4438] attempt to access beyond end of device [ 78.564695][ T4438] loop4: rw=524288, want=6536, limit=16 [ 78.573003][ T4438] attempt to access beyond end of device [ 78.573003][ T4438] loop4: rw=524288, want=34359736344, limit=16 [ 78.578266][ T4438] attempt to access beyond end of device [ 78.578266][ T4438] loop4: rw=524288, want=24, limit=16 [ 78.585441][ T4438] attempt to access beyond end of device [ 78.585441][ T4438] loop4: rw=524288, want=736, limit=16 [ 78.593540][ T4438] attempt to access beyond end of device [ 78.593540][ T4438] loop4: rw=524288, want=536576872, limit=16 [ 79.804811][ T26] audit: type=1326 audit(532.763:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7fc00000 [ 80.159519][ T4450] loop0: detected capacity change from 0 to 64 [ 80.321850][ T4456] loop4: detected capacity change from 0 to 8 [ 80.435128][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 82.388236][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 82.408672][ T4482] loop0: detected capacity change from 0 to 256 [ 82.469050][ T4482] FAT-fs (loop0): Unrecognized mount option "shortname=" or missing value [ 82.514932][ T4485] netlink: 68 bytes leftover after parsing attributes in process `syz.4.115'. [ 82.625997][ T4487] loop3: detected capacity change from 0 to 2048 [ 82.772997][ T4487] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 82.775346][ T4487] UDF-fs: Scanning with blocksize 512 failed [ 82.810844][ T4487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.753972][ T4440] Bluetooth: Error in BCSP hdr checksum [ 83.793599][ T4501] device wlan0 entered promiscuous mode [ 83.795309][ T4501] device macsec1 entered promiscuous mode [ 83.873013][ T4501] device wlan0 left promiscuous mode [ 84.196100][ T4517] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 84.357366][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 84.828739][ T4082] Bluetooth: hci5: command 0x1003 tx timeout [ 84.832859][ T4042] Bluetooth: hci5: sending frame failed (-49) [ 85.091049][ T4525] capability: warning: `syz.1.128' uses deprecated v2 capabilities in a way that may be insecure [ 85.210760][ T4536] No such timeout policy "syz0" [ 85.225744][ T4535] loop4: detected capacity change from 0 to 512 [ 85.302745][ T4535] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 85.305248][ T4535] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.333752][ T4535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 85.336892][ T4535] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.386888][ T4535] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.133: attempt to clear invalid blocks 1024 len 1 [ 85.406589][ T4535] EXT4-fs (loop4): Remounting filesystem read-only [ 85.414609][ T4535] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.133: bg 0: block 361: padding at end of block bitmap is not set [ 85.427786][ T4535] EXT4-fs (loop4): Remounting filesystem read-only [ 85.430139][ T4535] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 85.437129][ T4535] EXT4-fs (loop4): Remounting filesystem read-only [ 85.445821][ T4535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.133: invalid indirect mapped block 1811939328 (level 0) [ 85.450599][ T4535] EXT4-fs (loop4): Remounting filesystem read-only [ 85.452495][ T4535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.133: invalid indirect mapped block 2185560079 (level 1) [ 85.457009][ T4535] EXT4-fs (loop4): Remounting filesystem read-only [ 85.495014][ T4535] EXT4-fs (loop4): 1 truncate cleaned up [ 85.496629][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,nomblk_io_submit. Quota mode: none. [ 85.591841][ T26] audit: type=1326 audit(538.553:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.133" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x0 [ 87.225357][ T4082] Bluetooth: hci5: command 0x1001 tx timeout [ 87.227248][ T4042] Bluetooth: hci5: sending frame failed (-49) [ 89.518433][ T4583] udc-core: couldn't find an available UDC or it's busy [ 89.520457][ T4583] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.558079][ T1960] Bluetooth: hci5: command 0x1009 tx timeout [ 90.615697][ T4042] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 90.619174][ T4042] CPU: 0 PID: 4042 Comm: kworker/u5:3 Not tainted 5.15.179-syzkaller #0 [ 90.621601][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.624547][ T4042] Workqueue: hci1 hci_rx_work [ 90.626034][ T4042] Call trace: [ 90.626949][ T4042] dump_backtrace+0x0/0x530 [ 90.628167][ T4042] show_stack+0x2c/0x3c [ 90.629277][ T4042] dump_stack_lvl+0x108/0x170 [ 90.630537][ T4042] dump_stack+0x1c/0x58 [ 90.631684][ T4042] sysfs_create_dir_ns+0x278/0x318 [ 90.633043][ T4042] kobject_add_internal+0x384/0x8f0 [ 90.634485][ T4042] kobject_add+0x14c/0x21c [ 90.635738][ T4042] device_add+0x400/0xef4 [ 90.636967][ T4042] hci_conn_add_sysfs+0xc4/0x1cc [ 90.638446][ T4042] le_conn_complete_evt+0x954/0x1228 [ 90.639957][ T4042] hci_le_meta_evt+0x234/0x31c0 [ 90.641249][ T4042] hci_event_packet+0xd34/0x12b4 [ 90.642637][ T4042] hci_rx_work+0x1d0/0x830 [ 90.643868][ T4042] process_one_work+0x790/0x11b8 [ 90.645184][ T4042] worker_thread+0x910/0x1034 [ 90.646451][ T4042] kthread+0x37c/0x45c [ 90.647516][ T4042] ret_from_fork+0x10/0x20 [ 90.728466][ T4042] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.732080][ T4042] Bluetooth: hci1: failed to register connection device [ 92.559857][ T26] audit: type=1326 audit(545.523:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7ffc0000 [ 93.513694][ T4623] loop4: detected capacity change from 0 to 16 [ 93.538566][ T26] audit: type=1326 audit(546.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7ffc0000 [ 93.555680][ T4633] loop2: detected capacity change from 0 to 16 [ 93.603271][ T4623] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 93.680839][ T4633] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.919202][ T4637] process 'syz.0.153' launched './file1' with NULL argv: empty string added [ 93.925314][ T4623] tipc: Started in network mode [ 93.955052][ T4623] tipc: Node identity ac14140f, cluster identity 4711 [ 93.977257][ T4623] tipc: New replicast peer: 10.1.1.2 [ 93.993761][ T4623] tipc: Enabled bearer , priority 10 [ 94.333771][ T4643] loop1: detected capacity change from 0 to 1024 [ 94.479912][ T4650] netlink: 'syz.0.157': attribute type 21 has an invalid length. [ 94.501432][ T4650] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 94.532182][ T4650] netlink: 512 bytes leftover after parsing attributes in process `syz.0.157'. [ 94.536256][ T4643] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.337010][ T4086] tipc: Node number set to 2886997007 [ 95.505243][ T4665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.512355][ T4665] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.675000][ T4676] udc-core: couldn't find an available UDC or it's busy [ 95.677110][ T4676] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.699834][ T4676] loop1: detected capacity change from 0 to 128 [ 95.704354][ T4674] loop0: detected capacity change from 0 to 512 [ 95.753036][ T4674] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.755114][ T4674] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.782973][ T4674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.803599][ T4674] EXT4-fs (loop0): 1 truncate cleaned up [ 95.805236][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 95.905557][ T4683] /dev/loop0: Can't open blockdev [ 97.133640][ T4674] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 97.138845][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 98.748943][ T4082] Bluetooth: hci1: command 0x0406 tx timeout [ 98.773715][ T4707] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 98.786584][ T4707] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 98.797721][ T4707] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 98.953630][ T4721] loop1: detected capacity change from 0 to 256 [ 98.983091][ T4674] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 98.983406][ T4721] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.003712][ T4721] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 99.023085][ T4721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.193942][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 99.209063][ T4741] udc-core: couldn't find an available UDC or it's busy [ 99.214137][ T4741] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.440296][ T4745] MPTCP: addr_signal error, add_addr=1, echo=0 [ 99.609454][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 99.627697][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 99.645389][ T4758] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 99.647769][ T4758] netlink: 17 bytes leftover after parsing attributes in process `syz.0.191'. [ 101.830286][ T4765] dccp_close: ABORT with 84 bytes unread [ 101.886126][ T4788] device bridge_slave_0 left promiscuous mode [ 101.974789][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.989249][ T4788] device bridge_slave_1 left promiscuous mode [ 102.996585][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.337906][ T4788] bond0: (slave bond_slave_0): Releasing backup interface [ 104.268029][ T4788] bond0: (slave bond_slave_1): Releasing backup interface [ 104.381795][ T4788] team0: Port device team_slave_0 removed [ 104.411320][ T4788] team0: Port device team_slave_1 removed [ 104.418418][ T4788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.423919][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.443060][ T4788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.445436][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.872179][ T4856] loop0: detected capacity change from 0 to 512 [ 106.964091][ T4858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.054998][ T4850] device syzkaller0 entered promiscuous mode [ 107.429361][ T4856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.745700][ T4856] EXT4-fs (loop0): 1 truncate cleaned up [ 107.762262][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.779064][ T4864] loop1: detected capacity change from 0 to 256 [ 108.113380][ T4872] loop2: detected capacity change from 0 to 512 [ 108.154701][ T4872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.183760][ T4872] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.191331][ T4872] EXT4-fs (loop2): 1 truncate cleaned up [ 108.193066][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 110.624677][ T1960] Bluetooth: hci5: command 0x1003 tx timeout [ 110.628128][ T144] Bluetooth: hci5: sending frame failed (-49) [ 112.923314][ T4183] Bluetooth: hci5: command 0x1001 tx timeout [ 113.090846][ T144] Bluetooth: hci5: sending frame failed (-49) [ 114.207620][ T4909] tc_dump_action: action bad kind [ 114.298918][ T4924] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 114.510575][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 115.178924][ T2440] Bluetooth: hci5: command 0x1009 tx timeout [ 115.898037][ T4942] 9pnet: Could not find request transport: 0xffffffffffffffff [ 115.969041][ T4943] ufs: You didn't specify the type of your ufs filesystem [ 115.969041][ T4943] [ 115.969041][ T4943] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 115.969041][ T4943] [ 115.969041][ T4943] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 115.978084][ T4943] ufs: ufstype=old is supported read-only [ 115.987505][ T4943] ufs: ufs_fill_super(): bad magic number [ 116.909057][ T4956] device team_slave_0 entered promiscuous mode [ 116.911290][ T4956] device team_slave_1 entered promiscuous mode [ 118.188906][ T4968] tipc: Started in network mode [ 118.190551][ T4968] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 118.202395][ T4968] tipc: Enabled bearer , priority 18 [ 119.217058][ T4983] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.420812][ T4082] tipc: Node number set to 10005162 [ 119.464182][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 121.395624][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 121.459412][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 122.504935][ T5012] tipc: Enabled bearer , priority 10 [ 123.643513][ T5012] tipc: Enabled bearer , priority 0 [ 123.675934][ T5035] loop0: detected capacity change from 0 to 256 [ 123.704913][ T5012] device syzkaller0 entered promiscuous mode [ 123.722028][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.724309][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.740844][ T5035] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 123.752297][ T5035] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 123.755488][ T5035] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 123.764539][ T5035] UDF-fs: Scanning with blocksize 512 failed [ 123.769813][ T5033] device bridge_slave_0 left promiscuous mode [ 123.771663][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.783925][ T5035] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 123.800821][ T5035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.831040][ T5033] device bridge_slave_1 left promiscuous mode [ 123.833022][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.880150][ T5033] bond0: (slave bond_slave_0): Releasing backup interface [ 123.926145][ T5033] bond0: (slave bond_slave_1): Releasing backup interface [ 124.004722][ T5033] team0: Port device team_slave_0 removed [ 124.015417][ T5033] team0: Port device team_slave_1 removed [ 124.028816][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.031066][ T5033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.035173][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.037242][ T5033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.048359][ T5011] tipc: Resetting bearer [ 124.084306][ T5011] tipc: Disabling bearer [ 124.173403][ T5044] loop1: detected capacity change from 0 to 512 [ 124.722183][ T5044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.076214][ T5044] EXT4-fs (loop1): 1 truncate cleaned up [ 125.078362][ T5044] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 125.095055][ T5054] 9pnet: Could not find request transport: 0xffffffffffffffff [ 127.631757][ T5074] loop2: detected capacity change from 0 to 8 [ 127.661676][ T5081] loop0: detected capacity change from 0 to 256 [ 127.692000][ T5074] SQUASHFS error: xz decompression failed, data probably corrupt [ 127.697896][ T5081] exfat: Bad value for 'uid' [ 127.699824][ T5074] SQUASHFS error: Failed to read block 0x108: -5 [ 127.701755][ T5074] SQUASHFS error: Unable to read metadata cache entry [106] [ 127.703705][ T5074] SQUASHFS error: Unable to read inode 0x11f [ 127.724604][ T5087] loop4: detected capacity change from 0 to 512 [ 127.737106][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 127.785627][ T5087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.825866][ T5087] EXT4-fs (loop4): 1 truncate cleaned up [ 127.838312][ T5087] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.571698][ T5103] loop2: detected capacity change from 0 to 40427 [ 130.069266][ T5103] F2FS-fs (loop2): invalid crc value [ 130.117003][ T5103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.137469][ T5103] F2FS-fs (loop2): Start checkpoint disabled! [ 130.173546][ T5103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 130.452355][ T5115] loop0: detected capacity change from 0 to 512 [ 132.229533][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.517907][ T5115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.427019][ T5115] EXT4-fs: error -4 creating inode table initialization thread [ 133.453491][ T5115] EXT4-fs (loop0): mount failed [ 133.587555][ T5133] netlink: 'syz.3.302': attribute type 21 has an invalid length. [ 133.589957][ T5133] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 133.772378][ T5137] loop4: detected capacity change from 0 to 256 [ 135.344772][ T5155] loop2: detected capacity change from 0 to 512 [ 135.349338][ T5137] exfat: Bad value for 'uid' [ 135.377500][ T5155] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.379474][ T5155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.427101][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 135.462101][ T5155] EXT4-fs (loop2): 1 truncate cleaned up [ 135.464004][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 135.515596][ T5164] loop4: detected capacity change from 0 to 256 [ 135.688964][ T5164] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.691951][ T5164] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 136.453128][ T5164] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 136.613386][ T5174] udc-core: couldn't find an available UDC or it's busy [ 136.626591][ T5174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.689037][ T5173] loop0: detected capacity change from 0 to 2048 [ 136.909758][ T5173] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 136.911992][ T5173] UDF-fs: Scanning with blocksize 512 failed [ 137.716268][ T5173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.830916][ T5186] loop1: detected capacity change from 0 to 16 [ 137.877518][ T5186] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.898453][ T5183] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 137.901775][ T5183] EXT4-fs (loop5): unable to read superblock [ 139.488405][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 139.498797][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 139.544599][ T5206] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 139.546998][ T5206] netlink: 17 bytes leftover after parsing attributes in process `syz.3.335'. [ 143.485031][ T5242] loop2: detected capacity change from 0 to 2048 [ 143.575624][ T5242] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 143.588157][ T5242] UDF-fs: Scanning with blocksize 512 failed [ 143.607078][ T5242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.369355][ T5240] netlink: 104 bytes leftover after parsing attributes in process `syz.3.337'. [ 144.523538][ T5253] loop4: detected capacity change from 0 to 512 [ 144.561422][ T5253] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.563442][ T5253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.942715][ T5253] EXT4-fs (loop4): 1 truncate cleaned up [ 145.948408][ T5253] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 148.812196][ T5287] tipc: Started in network mode [ 148.813671][ T5287] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 148.871377][ T5287] tipc: Enabled bearer , priority 18 [ 148.919468][ T5281] tc_dump_action: action bad kind [ 150.673197][ T21] tipc: Node number set to 10005162 [ 151.560071][ T5312] loop1: detected capacity change from 0 to 2048 [ 152.865739][ T5312] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 153.530928][ T5312] UDF-fs: Scanning with blocksize 512 failed [ 153.546119][ T5336] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 153.551597][ T5312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.039509][ T5336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.132845][ T5338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.464322][ T5338] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.488487][ T5338] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 156.449856][ T5341] device ip6erspan0 entered promiscuous mode [ 156.454406][ T5341] bond1: (slave ip6erspan0): making interface the new active one [ 157.537502][ T5341] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 159.757163][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 164.312629][ T5422] loop1: detected capacity change from 0 to 64 [ 165.201400][ T26] audit: type=1326 audit(1071.164:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.220014][ T26] audit: type=1326 audit(1071.184:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.231320][ T26] audit: type=1326 audit(1071.184:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.238882][ T26] audit: type=1326 audit(1071.184:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.255298][ T26] audit: type=1326 audit(1071.184:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.265467][ T26] audit: type=1326 audit(1071.184:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.284606][ T26] audit: type=1326 audit(1071.184:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.291203][ T26] audit: type=1326 audit(1071.184:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.297087][ T26] audit: type=1326 audit(1071.184:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 165.304044][ T26] audit: type=1326 audit(1071.184:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.392" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadbbcd28 code=0x7fc00000 [ 167.033051][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 172.434601][ T4082] Bluetooth: hci3: command 0x0406 tx timeout [ 172.436356][ T4082] Bluetooth: hci4: command 0x0406 tx timeout [ 172.445197][ T4082] Bluetooth: hci2: command 0x0406 tx timeout [ 172.446887][ T4082] Bluetooth: hci0: command 0x0406 tx timeout [ 172.461753][ T4082] Bluetooth: hci1: command 0x0406 tx timeout [ 172.762694][ T5481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.411'. [ 173.852750][ T5500] siw: device registration error -23 [ 173.871765][ T5497] syz.0.417 sent an empty control message without MSG_MORE. [ 173.884175][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 175.226293][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 175.249549][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 175.393281][ T5517] loop1: detected capacity change from 0 to 2048 [ 175.429892][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 175.432387][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 177.202655][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 178.023760][ T5520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm vhost-5517: bg 0: block 234: padding at end of block bitmap is not set [ 178.538403][ T5560] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.541819][ T5560] F2FS-fs (loop9): Unable to read 1th superblock [ 178.543625][ T5560] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.546671][ T5560] F2FS-fs (loop9): Unable to read 2th superblock [ 181.512482][ T5594] loop1: detected capacity change from 0 to 190 [ 181.658701][ T5603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 181.661563][ T5603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 182.460223][ T5603] device netdevsim0 entered promiscuous mode [ 182.489750][ T5594] __ntfs_warning: 53 callbacks suppressed [ 182.489767][ T5594] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 182.496534][ T5594] ntfs: (device loop1): ntfs_read_inode_mount(): Failed to load the complete runlist for $MFT/$DATA. Driver bug or corrupt $MFT. Run chkdsk. [ 182.506546][ T5603] device netdevsim0 left promiscuous mode [ 182.506683][ T5594] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 182.512916][ T5594] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 182.706327][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.708519][ T5610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.722593][ T5610] xt_nat: multiple ranges no longer supported [ 182.729305][ T5608] udc-core: couldn't find an available UDC or it's busy [ 182.738305][ T5608] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.846949][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 184.569161][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 184.679050][ T5642] lo speed is unknown, defaulting to 1000 [ 184.680674][ T5642] lo speed is unknown, defaulting to 1000 [ 184.682639][ T5642] lo speed is unknown, defaulting to 1000 [ 184.693829][ T5642] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 184.731567][ T5642] lo speed is unknown, defaulting to 1000 [ 184.734138][ T5642] lo speed is unknown, defaulting to 1000 [ 184.767700][ T5642] lo speed is unknown, defaulting to 1000 [ 184.769897][ T5642] lo speed is unknown, defaulting to 1000 [ 184.772033][ T5642] lo speed is unknown, defaulting to 1000 [ 184.785169][ T5646] syz.3.465 uses obsolete (PF_INET,SOCK_PACKET) [ 185.069642][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.560144][ T26] audit: type=1326 audit(1092.524:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 186.690942][ T26] audit: type=1326 audit(1092.524:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 186.964868][ T26] audit: type=1326 audit(1092.524:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 186.997052][ T26] audit: type=1326 audit(1092.944:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=433 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 187.015909][ T26] audit: type=1326 audit(1092.944:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 187.024717][ T5693] loop4: detected capacity change from 0 to 64 [ 187.036842][ T26] audit: type=1326 audit(1092.944:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b07d28 code=0x7ffc0000 [ 187.111212][ T5699] 9pnet: Insufficient options for proto=fd [ 192.152881][ T5757] device syzkaller0 entered promiscuous mode [ 192.875370][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.895580][ T5739] loop4: detected capacity change from 0 to 4096 [ 192.948876][ T5739] __ntfs_error: 1 callbacks suppressed [ 192.948890][ T5739] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 193.044812][ T5739] ntfs: volume version 3.1. [ 193.119745][ T5766] bpf_jit: unknown atomic op code 51 [ 193.744171][ T5778] loop4: detected capacity change from 0 to 1024 [ 193.911058][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.936635][ T5780] xt_CT: No such helper "netbios-ns" [ 193.969012][ T5778] raw_sendmsg: syz.4.508 forgot to set AF_INET. Fix it! [ 193.999588][ T5778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.508'. [ 194.016203][ T5778] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 194.078935][ T5778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 194.114773][ T5787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.268138][ T5794] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.271364][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.273608][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.319763][ T5794] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 194.323573][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.326164][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.329434][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.331343][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.342942][ T5794] team0: Port device bridge0 added [ 194.345178][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.374060][ T5798] loop4: detected capacity change from 0 to 128 [ 194.581422][ T5798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.457208][ T4182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.461249][ T4182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.633967][ T5826] bridge0: port 1(vxlan0) entered blocking state [ 197.635869][ T5826] bridge0: port 1(vxlan0) entered disabled state [ 197.650196][ T5826] device vxlan0 entered promiscuous mode [ 197.711013][ T5833] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 198.001694][ T5833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.448538][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 203.529909][ T5883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 203.539897][ T5884] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 203.544348][ T5883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 203.779381][ T5890] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 204.480917][ T5890] team0: Cannot enslave team device to itself [ 204.535172][ T5893] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 204.554709][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.546'. [ 204.635192][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 204.638474][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 204.696288][ T5893] team0: Port device geneve0 added [ 204.829505][ T5906] loop1: detected capacity change from 0 to 1024 [ 205.011736][ T5906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.922194][ T5929] loop4: detected capacity change from 0 to 1024 [ 206.003623][ T5929] EXT4-fs (loop4): Ignoring removed oldalloc option [ 206.005464][ T5929] EXT4-fs (loop4): Ignoring removed bh option [ 206.007093][ T5929] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.072005][ T5940] sctp: [Deprecated]: syz.1.559 (pid 5940) Use of int in max_burst socket option. [ 206.072005][ T5940] Use struct sctp_assoc_value instead [ 206.087391][ T5929] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 207.477571][ T5954] sctp: [Deprecated]: syz.3.566 (pid 5954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.477571][ T5954] Use struct sctp_sack_info instead [ 207.945044][ T5961] loop1: detected capacity change from 0 to 1024 [ 208.051668][ T5963] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 208.062917][ T5963] device syz_tun entered promiscuous mode [ 208.084210][ T5963] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.050439][ T148] hfsplus: b-tree write err: -5, ino 4 [ 210.335500][ T5994] tipc: Failed to remove unknown binding: 66,1,1/10005162:809048639/809048641 [ 210.344681][ T5994] tipc: Failed to remove unknown binding: 66,1,1/10005162:809048639/809048641 [ 210.347594][ T5994] tipc: Failed to remove unknown binding: 66,1,1/10005162:809048639/809048641 [ 213.375604][ T6026] xt_ipcomp: unknown flags B [ 214.345676][ T6030] device sit1 entered promiscuous mode [ 215.406825][ T6038] device netdevsim0 entered promiscuous mode [ 215.476473][ T6038] device netdevsim0 left promiscuous mode [ 215.506846][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 216.479742][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 216.556834][ T6073] loop1: detected capacity change from 0 to 64 [ 216.730598][ T136] tipc: Subscription rejected, illegal request [ 216.742452][ T6083] loop4: detected capacity change from 0 to 128 [ 216.797677][ T6083] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.830099][ T6083] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.509815][ T26] audit: type=1326 audit(1124.474:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.529492][ T26] audit: type=1326 audit(1124.494:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.552419][ T26] audit: type=1326 audit(1124.504:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.559649][ T26] audit: type=1326 audit(1124.504:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.603654][ T26] audit: type=1326 audit(1124.504:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.646912][ T4043] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 218.648190][ T26] audit: type=1326 audit(1124.504:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.649627][ T4043] FAT-fs (loop4): Filesystem has been set read-only [ 218.655732][ T26] audit: type=1326 audit(1124.504:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.664571][ T26] audit: type=1326 audit(1124.504:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.671768][ T4043] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 218.682488][ T26] audit: type=1326 audit(1124.504:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.691683][ T26] audit: type=1326 audit(1124.504:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83714d28 code=0x7ffc0000 [ 218.712034][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 218.714690][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 218.715023][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 218.753345][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 218.776190][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 218.798772][ T6107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.926933][ T6114] ------------[ cut here ]------------ [ 218.928961][ T6114] WARNING: CPU: 0 PID: 6114 at net/mac80211/ibss.c:503 ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 218.931790][ T6114] Modules linked in: [ 218.932866][ T6114] CPU: 0 PID: 6114 Comm: syz.0.619 Not tainted 5.15.179-syzkaller #0 [ 218.935105][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.938012][ T6114] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 218.940202][ T6114] pc : ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 218.941906][ T6114] lr : ieee80211_ibss_csa_beacon+0x514/0x5b0 [ 218.943612][ T6114] sp : ffff80001ffd6ca0 [ 218.944837][ T6114] x29: ffff80001ffd6cc0 x28: 1fffe0001d2d6251 x27: dfff800000000000 [ 218.947104][ T6114] x26: ffff0000da143770 x25: ffff0000da1405c0 x24: 0000000000000000 [ 218.949431][ T6114] x23: ffff0000e96b1288 x22: ffff0000e96b1b18 x21: 0000000000000002 [ 218.951667][ T6114] x20: ffff0000e96b0c80 x19: ffff80001ffd7000 x18: 0000000000000201 [ 218.953804][ T6114] x17: 0000000000000002 x16: ffff8000084c52d8 x15: 0000000000000003 [ 218.956159][ T6114] x14: ffff0000c14151c0 x13: 0000000000ff0100 x12: 0000000000080000 [ 218.958409][ T6114] x11: 000000000000229f x10: ffff800022079000 x9 : 00000000000022a0 [ 218.960649][ T6114] x8 : ffff8000114eaaf0 x7 : 0000000000000000 x6 : 0000000000000000 [ 218.962918][ T6114] x5 : ffff8000179de718 x4 : 0000000000000000 x3 : ffff800008046154 [ 218.965214][ T6114] x2 : 0000000000000006 x1 : ffff800011caabe0 x0 : 00000000ffffffea [ 218.967409][ T6114] Call trace: [ 218.968350][ T6114] ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 218.969938][ T6114] ieee80211_channel_switch+0x10c4/0x1f5c [ 218.971626][ T6114] rdev_channel_switch+0x128/0x5ac [ 218.973066][ T6114] nl80211_channel_switch+0x750/0xe30 [ 218.974602][ T6114] genl_rcv_msg+0xc48/0x1044 [ 218.975934][ T6114] netlink_rcv_skb+0x20c/0x3b8 [ 218.977303][ T6114] genl_rcv+0x38/0x50 [ 218.978380][ T6114] netlink_unicast+0x664/0x938 [ 218.979660][ T6114] netlink_sendmsg+0x844/0xb38 [ 218.981118][ T6114] ____sys_sendmsg+0x584/0x870 [ 218.982466][ T6114] ___sys_sendmsg+0x214/0x294 [ 218.983794][ T6114] __arm64_sys_sendmsg+0x1ac/0x25c [ 218.985364][ T6114] invoke_syscall+0x98/0x2b8 [ 218.986684][ T6114] el0_svc_common+0x138/0x258 [ 218.987937][ T6114] do_el0_svc+0x58/0x14c [ 218.989132][ T6114] el0_svc+0x7c/0x1f0 [ 218.990326][ T6114] el0t_64_sync_handler+0x84/0xe4 [ 218.991701][ T6114] el0t_64_sync+0x1a0/0x1a4 [ 218.992915][ T6114] irq event stamp: 626 [ 218.994021][ T6114] hardirqs last enabled at (625): [] __local_bh_enable_ip+0x230/0x470 [ 218.996818][ T6114] hardirqs last disabled at (626): [] el1_dbg+0x24/0x80 [ 218.999138][ T6114] softirqs last enabled at (624): [] cfg80211_get_bss+0x6e4/0xd10 [ 219.001741][ T6114] softirqs last disabled at (622): [] cfg80211_get_bss+0x124/0xd10 [ 219.004376][ T6114] ---[ end trace 4a3fcbf76d313ca3 ]--- [ 220.041172][ T6110] kernel read not supported for file /L (pid: 6110 comm: syz.2.618)