last executing test programs: 2.795534548s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="180000006a00810400af47f6ff0000000000", 0x12}], 0x1}, 0x0) 2.696243573s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8000000, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000006000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)) readv(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/237, 0xed}], 0x2) fchmod(r1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.924982533s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r1) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 1.81223847s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.732216502s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.68070855s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="371692e7f7ef"}) 1.6795354s ago: executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 1.644584486s ago: executing program 2: r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.461572864s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r2}, 0x10) write$cgroup_pid(r0, &(0x7f0000000980), 0x12) 1.342539033s ago: executing program 0: socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0000000001010400000000141a000002000004240001800c0002800500010000000037db82710492680500e000000108000200e00000013c0002802c000180140003e8fc020000000000000000000000000001140016feb41e010400000000000000000000000000000000010c0002800500010000000000080007dfa0f2504001a0aa3fff2b9271022239633bd97670f1a8e4127580a49a333c194b8cdfcbb2a5b967877f75eebb8dd1c8b4a0eb076e39608b002f6ba02e581c3937b15339fcb5561c8eb64e5539c01b9b40d4922ad4a1ec9e1fa0a359e3a5b48044f081"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000280)=0x98e1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="f5"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_newroute={0x50, 0x18, 0x2, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfd, 0x3, 0x1180}, [@RTA_EXPIRES={0x8, 0x17, 0x20}, @RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x2}}, @RTA_EXPIRES={0x8, 0x17, 0x8}, @RTA_IIF={0x8}]}, 0x50}}, 0x20008000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.225794651s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000dc0f00010000000000000000000000000000000000000000020000100000c300000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES8], 0xb8}}, 0x0) 1.179145658s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r1) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 1.004119035s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8000000, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000006000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)) readv(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/237, 0xed}], 0x2) fchmod(r1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 947.513334ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 893.610402ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x13c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x112, 0x2a, [@cf={0x4, 0x6, {0x7, 0xa8, 0x0, 0x39b1}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x6}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @random_vendor={0xdd, 0xf9, "268cba7556020d8eadf42ea9c4c4891306f81fc7c47bdb507c20b11cc487ddd6255f090777c715daad337d02db74df1308e5913e983bb85db8fbad39d40b914def1e5e544d12a07e56dffd65ec24f0f7e81c926534a78da429ab58e057a07cb83d30ebc6d568c7dc6b3dd116b7f734d329854669bb196720dfd8a4b29a5cc726548b6aac8fa169f81bdc4f8e8612a4d997103e14fe9b4334fd51e359f03fd6e2acee78b4028afd2ee828dde6e973016b911ff56d89b6f94b0796e552dfdf78ba8692f80df998b385a5f7d2482ebc1a5b2dcd46106eac61006b46bfac5def6a8468c03b971205931a27db8f55cb3c85b0da8d7be1eec6645887"}]}]}, 0x13c}}, 0x0) 813.224055ms ago: executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1032, 0xffffffffffffffff, 0x10000000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x13, r2, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000180)=0x1bff) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000007a0000000004d5000000000000000000"], 0x14}}, 0x0) syz_io_uring_submit(r3, r0, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x10000000) 774.98561ms ago: executing program 2: socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xa9b, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x5}, {0x6c}, {0x6}]}) fsopen(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r3, r4, 0xffffffff, 0x2, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x0, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000034, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r8 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x400, &(0x7f00000002c0)) r12 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000180)=r8, 0x12) syz_emit_ethernet(0x42, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @local, @remote}}}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="4000aa000a00020035"], 0x28}}, 0x0) 628.308283ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r2}, 0x10) write$cgroup_pid(r0, &(0x7f0000000980), 0x12) 626.601103ms ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}, {&(0x7f00000003c0)="23f758c32e980544f6368a5bbc3d7a9d86d6fb94f2", 0x15}], 0x2) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 508.319171ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="180000006a00810400af47f6ff0000000000000040", 0x15}], 0x1}, 0x0) 504.430072ms ago: executing program 1: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'wlan1\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 435.799442ms ago: executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000050601040000000000000000000000000900030073797a31000000000900020073797a32000000000500010007000000d54a55a375514b5113aba511f6e29cbf53e96c408740f54eca6139449a574c"], 0x34}}, 0x0) 380.366001ms ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r1) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 361.324984ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 300.180664ms ago: executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 153.501116ms ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 99.644725ms ago: executing program 4: r0 = socket(0x0, 0x80002, 0x0) socket(0xa, 0x40000000002, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e25, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12060, 0x0) socket(0x40000000015, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket(0x15, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) clock_gettime(0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x7000c000}, 0x804) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x106}, 0x48) 37.103074ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8000000, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000006000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)) readv(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/237, 0xed}], 0x2) fchmod(r1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 5.621539ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="371692e7f7ef"}) 0s ago: executing program 1: ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000003580)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9}]}}}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. 2024/06/12 20:34:27 fuzzer started 2024/06/12 20:34:27 dialing manager at 10.128.0.163:30016 [ 39.238776][ T3505] cgroup: Unknown subsys name 'net' [ 39.359096][ T3505] cgroup: Unknown subsys name 'rlimit' 2024/06/12 20:34:28 starting 5 executor processes [ 40.286075][ T3509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 41.306449][ T3534] chnl_net:caif_netlink_parms(): no params data found [ 41.447504][ T3524] chnl_net:caif_netlink_parms(): no params data found [ 41.480937][ T3528] chnl_net:caif_netlink_parms(): no params data found [ 41.511440][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.518619][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.527810][ T3534] device bridge_slave_0 entered promiscuous mode [ 41.546793][ T3523] chnl_net:caif_netlink_parms(): no params data found [ 41.555286][ T3537] chnl_net:caif_netlink_parms(): no params data found [ 41.565645][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.572804][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.580628][ T3534] device bridge_slave_1 entered promiscuous mode [ 41.654263][ T3534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.668195][ T3534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.692223][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.699279][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.707740][ T3524] device bridge_slave_0 entered promiscuous mode [ 41.731894][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.738955][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.746753][ T3524] device bridge_slave_1 entered promiscuous mode [ 41.766639][ T3534] team0: Port device team_slave_0 added [ 41.795315][ T3534] team0: Port device team_slave_1 added [ 41.824209][ T3524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.859886][ T3524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.869064][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.876243][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.884022][ T3528] device bridge_slave_0 entered promiscuous mode [ 41.898580][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.906120][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.914251][ T3523] device bridge_slave_0 entered promiscuous mode [ 41.922000][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.929048][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.937350][ T3537] device bridge_slave_0 entered promiscuous mode [ 41.958238][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.965434][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.973695][ T3528] device bridge_slave_1 entered promiscuous mode [ 41.981343][ T3534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.988280][ T3534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.014781][ T3534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.026435][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.033672][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.041567][ T3523] device bridge_slave_1 entered promiscuous mode [ 42.048908][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.056343][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.064180][ T3537] device bridge_slave_1 entered promiscuous mode [ 42.073280][ T3524] team0: Port device team_slave_0 added [ 42.095036][ T3534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.102189][ T3534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.128163][ T3534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.155412][ T3524] team0: Port device team_slave_1 added [ 42.180662][ T3537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.206502][ T3528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.218686][ T3528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.230788][ T3523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.241492][ T3537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.271992][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.278951][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.304946][ T3524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.317320][ T3523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.336344][ T3537] team0: Port device team_slave_0 added [ 42.348698][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.355737][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.381858][ T3524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.413863][ T3537] team0: Port device team_slave_1 added [ 42.421439][ T3528] team0: Port device team_slave_0 added [ 42.447711][ T3534] device hsr_slave_0 entered promiscuous mode [ 42.454978][ T3534] device hsr_slave_1 entered promiscuous mode [ 42.463331][ T3528] team0: Port device team_slave_1 added [ 42.478692][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.485906][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.511984][ T3537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.525238][ T3523] team0: Port device team_slave_0 added [ 42.554211][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.561246][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.587381][ T3537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.600645][ T3523] team0: Port device team_slave_1 added [ 42.612960][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.620286][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.646506][ T3528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.688029][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.695202][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.721322][ T3528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.734524][ T3524] device hsr_slave_0 entered promiscuous mode [ 42.741401][ T3524] device hsr_slave_1 entered promiscuous mode [ 42.747847][ T3524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.755616][ T3524] Cannot create hsr debugfs directory [ 42.773814][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.781012][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.806999][ T3523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.839970][ T3537] device hsr_slave_0 entered promiscuous mode [ 42.846607][ T3537] device hsr_slave_1 entered promiscuous mode [ 42.853490][ T3537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.861295][ T3537] Cannot create hsr debugfs directory [ 42.867002][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.874192][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.900227][ T3523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.972058][ T3528] device hsr_slave_0 entered promiscuous mode [ 42.978868][ T3528] device hsr_slave_1 entered promiscuous mode [ 42.985710][ T3528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.993391][ T3528] Cannot create hsr debugfs directory [ 43.056905][ T3523] device hsr_slave_0 entered promiscuous mode [ 43.060807][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 43.063370][ T1067] Bluetooth: hci2: command 0x0409 tx timeout [ 43.075888][ T3523] device hsr_slave_1 entered promiscuous mode [ 43.076259][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 43.088378][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 43.088394][ T3523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.102477][ T3523] Cannot create hsr debugfs directory [ 43.140130][ T1067] Bluetooth: hci4: command 0x0409 tx timeout [ 43.321619][ T3524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.342183][ T3524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.357008][ T3524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.365813][ T3524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.384567][ T3534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.396702][ T3534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.405241][ T3534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.435630][ T3534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.501992][ T3528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.521933][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.530832][ T3528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.559842][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.568680][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.577062][ T3528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.587268][ T3528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.598346][ T3524] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.619216][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.633293][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.642154][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.649273][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.659245][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.705715][ T3537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.718109][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.727278][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.736709][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.743806][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.751665][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.760952][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.769389][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.778206][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.787201][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.795907][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.804252][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.812821][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.825384][ T3524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.843317][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.852349][ T3537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.862167][ T3537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.873519][ T3537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.893719][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.902252][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.910892][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.954651][ T3523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.970336][ T3523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.979447][ T3523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.993422][ T3534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.012279][ T3523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.047287][ T3534] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.066406][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.080039][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.099659][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.108645][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.117240][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.124322][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.132179][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.141505][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.149876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.156908][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.164606][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.204287][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.213142][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.222805][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.231811][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.240189][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.248551][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.257024][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.265389][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.277979][ T3534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.289129][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.307519][ T3524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.317364][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.326840][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.335896][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.344813][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.352477][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.397457][ T3537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.422863][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.431937][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.455404][ T3528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.486609][ T3524] device veth0_vlan entered promiscuous mode [ 44.495069][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.503516][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.511884][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.520419][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.530754][ T3537] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.547705][ T3528] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.562883][ T3524] device veth1_vlan entered promiscuous mode [ 44.570781][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.578386][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.594741][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.603922][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.612517][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.619577][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.627190][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.634653][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.642565][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.650541][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.659149][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.672802][ T3534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.687990][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.696787][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.705697][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.712788][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.720630][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.729126][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.737743][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.744837][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.752558][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.762676][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.778471][ T3523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.796932][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.806628][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.815593][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.822714][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.831216][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.840118][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.848919][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.887634][ T3528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.899161][ T3528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.913951][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.923862][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.932389][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.941286][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.949545][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.958058][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.966396][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.974865][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.983991][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.992700][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.001138][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.010656][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.019098][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.027450][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.035674][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.043843][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.051545][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.076104][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.084906][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.094083][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.103065][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.121507][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.129129][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.136935][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.140384][ T3566] Bluetooth: hci0: command 0x041b tx timeout [ 45.144837][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.150336][ T3566] Bluetooth: hci1: command 0x041b tx timeout [ 45.164036][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.164060][ T3566] Bluetooth: hci2: command 0x041b tx timeout [ 45.176557][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.178194][ T3566] Bluetooth: hci3: command 0x041b tx timeout [ 45.195824][ T3523] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.209641][ T3534] device veth0_vlan entered promiscuous mode [ 45.219576][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.227249][ T3567] Bluetooth: hci4: command 0x041b tx timeout [ 45.255124][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.264622][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.273741][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.280847][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.289582][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.298274][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.310677][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.327090][ T3524] device veth0_macvtap entered promiscuous mode [ 45.343062][ T3534] device veth1_vlan entered promiscuous mode [ 45.350690][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.358707][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.367688][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.376716][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.385707][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.392803][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.400514][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.413744][ T3524] device veth1_macvtap entered promiscuous mode [ 45.440125][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.448188][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.457770][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.466955][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.477199][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.487408][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.496308][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.505783][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.514270][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.522615][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.530380][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.538734][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.563859][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.572669][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.591261][ T3528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.601613][ T3523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.611185][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.618631][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.627149][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.635757][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.654443][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.672494][ T3534] device veth0_macvtap entered promiscuous mode [ 45.685389][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.694104][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.705016][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.724571][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.733717][ T3537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.746534][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.758501][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.767869][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.776993][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.792022][ T3524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.801580][ T3524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.810662][ T3524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.819349][ T3524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.831004][ T3534] device veth1_macvtap entered promiscuous mode [ 45.875198][ T3528] device veth0_vlan entered promiscuous mode [ 45.882314][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.895032][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.902689][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.912963][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.921583][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.930535][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.938590][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.947752][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.955860][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.969148][ T3534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.980106][ T3534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.991826][ T3534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.005162][ T3523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.024137][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.033008][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.046202][ T3528] device veth1_vlan entered promiscuous mode [ 46.065269][ T3537] device veth0_vlan entered promiscuous mode [ 46.080031][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.088532][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.097065][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.105370][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.114157][ T3534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.124941][ T3534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.142147][ T3534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.153613][ T3534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.162454][ T3534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.171403][ T3534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.180966][ T3534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.191537][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.199258][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.218718][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.227936][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.249196][ T3537] device veth1_vlan entered promiscuous mode [ 46.271267][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.279287][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.290936][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.299607][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.333004][ T3528] device veth0_macvtap entered promiscuous mode [ 46.366292][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.374709][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.415382][ T3528] device veth1_macvtap entered promiscuous mode [ 46.425219][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.433582][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.442007][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.449633][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.458225][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.468828][ T3537] device veth0_macvtap entered promiscuous mode [ 46.509319][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.520306][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.528304][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.534214][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.545526][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.556147][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.567620][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.577658][ T3537] device veth1_macvtap entered promiscuous mode [ 46.593177][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.601763][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.609577][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.622822][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.631617][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.639228][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.647883][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.667254][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.684578][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.697790][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.709128][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.722375][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.753184][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.767615][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.776401][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.784879][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.794295][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.802170][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.811323][ T3528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.823744][ T3528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.832507][ T3528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.841288][ T3528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.865031][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.873179][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.885112][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.897968][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.915173][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.933387][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.950830][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.961768][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.973003][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.982547][ T3523] device veth0_vlan entered promiscuous mode [ 47.001302][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.009469][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.025372][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.041887][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.057571][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.069514][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.086890][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.097012][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.108101][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.128685][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.146464][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.151203][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.167423][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.181760][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.193888][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.207158][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.220056][ T3566] Bluetooth: hci3: command 0x040f tx timeout [ 47.227591][ T3566] Bluetooth: hci2: command 0x040f tx timeout [ 47.238328][ T3566] Bluetooth: hci1: command 0x040f tx timeout [ 47.244865][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.249955][ T3602] mmap: syz-executor.1 (3602) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 47.254114][ T3566] Bluetooth: hci0: command 0x040f tx timeout [ 47.279887][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.310151][ T3586] Bluetooth: hci4: command 0x040f tx timeout [ 47.327949][ T3523] device veth1_vlan entered promiscuous mode [ 47.343503][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.363238][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.451485][ T3523] IPv6: macvlan1: Failed to add prefix route for address fe80::35; dropping [ 47.486867][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.501096][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.519274][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.529038][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.536706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 47.552868][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.561982][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.586424][ T3523] device veth0_macvtap entered promiscuous mode [ 47.656375][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.676022][ T3523] device veth1_macvtap entered promiscuous mode [ 47.688476][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.708677][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.728130][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.746370][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.770691][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.837395][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.868141][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.899393][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.914069][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.925974][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.936630][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.947831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 47.958386][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.968923][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.979869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 48.010939][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.032217][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.057160][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.067249][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.077986][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.087944][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.106643][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.118717][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.129227][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.142083][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.155795][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.166584][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.180566][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 48.180847][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.199009][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.212785][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.226108][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.257211][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.305637][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.332665][ T3523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.349202][ T3523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362635][ T3523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.370184][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.372206][ T3523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459923][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 48.476429][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.531579][ T3616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.582959][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.648462][ T3620] sp0: Synchronizing with TNC [ 48.651542][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.655987][ T3619] [U] [ 48.680225][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 48.935839][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.019154][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.294248][ T13] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 49.300647][ T3310] Bluetooth: hci1: command 0x0419 tx timeout [ 49.303429][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.369941][ T3310] Bluetooth: hci2: command 0x0419 tx timeout [ 49.386302][ T3310] Bluetooth: hci3: command 0x0419 tx timeout [ 49.411776][ T13] usb 2-1: config 0 descriptor?? [ 49.469653][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 49.488016][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 49.501501][ T3638] loop0: detected capacity change from 0 to 256 [ 49.521540][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.531420][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.539377][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.543415][ T3638] ======================================================= [ 49.543415][ T3638] WARNING: The mand mount option has been deprecated and [ 49.543415][ T3638] and is ignored by this kernel. Remove the mand [ 49.543415][ T3638] option from the mount to silence this warning. [ 49.543415][ T3638] ======================================================= [ 49.564879][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.674197][ T3638] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 49.760746][ T3645] device bond0 entered promiscuous mode [ 49.779717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 49.789146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.798175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.807163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.816158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.825223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.834177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 49.892915][ T3645] device bond_slave_0 entered promiscuous mode [ 49.910805][ T13] ntrig 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 49.922904][ T3645] device bond_slave_1 entered promiscuous mode [ 50.751721][ T13] usb 2-1: USB disconnect, device number 2 [ 51.037425][ T3637] loop3: detected capacity change from 0 to 32768 [ 51.069289][ T3669] loop0: detected capacity change from 0 to 2048 [ 51.155910][ T3637] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (3637) [ 52.101944][ T3637] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 52.201154][ T3674] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.297870][ T3637] BTRFS info (device loop3): using free space tree [ 52.327017][ T3637] BTRFS info (device loop3): has skinny extents [ 52.394735][ T3669] attempt to access beyond end of device [ 52.394735][ T3669] loop0: rw=0, want=15393162788902, limit=2048 [ 52.498555][ T3669] attempt to access beyond end of device [ 52.498555][ T3669] loop0: rw=0, want=15393162788902, limit=2048 [ 52.703548][ T3637] BTRFS error (device loop3): open_ctree failed [ 52.948592][ T3725] loop1: detected capacity change from 0 to 512 [ 53.027187][ T25] audit: type=1326 audit(1718224481.536:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3726 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 53.049364][ C0] vkms_vblank_simulate: vblank timer overrun [ 53.182171][ T3725] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.1: inline data xattr refers to an external xattr inode [ 53.236808][ T3725] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 53.259307][ T3725] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,barrier,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 53.394364][ T25] audit: type=1800 audit(1718224481.906:3): pid=3744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 53.431565][ T25] audit: type=1800 audit(1718224481.926:4): pid=3744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 54.258037][ T3746] loop4: detected capacity change from 0 to 32768 [ 54.392914][ T3746] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (3746) [ 54.461065][ T25] audit: type=1326 audit(1718224482.976:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3767 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52ad171ea9 code=0x0 [ 54.502277][ T3746] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 54.547118][ T3746] BTRFS info (device loop4): using free space tree [ 54.617322][ T3746] BTRFS info (device loop4): has skinny extents [ 54.929310][ T3796] loop2: detected capacity change from 0 to 2048 [ 55.003435][ T3801] loop0: detected capacity change from 0 to 2048 [ 55.009008][ T3796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.072665][ T3746] BTRFS info (device loop4): enabling ssd optimizations [ 55.269246][ T3810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.472606][ T3814] xt_CT: No such helper "snmp_trap" [ 55.478596][ T3801] attempt to access beyond end of device [ 55.478596][ T3801] loop0: rw=0, want=15393162788902, limit=2048 [ 55.540976][ T3801] attempt to access beyond end of device [ 55.540976][ T3801] loop0: rw=0, want=15393162788902, limit=2048 [ 55.838500][ T3830] loop3: detected capacity change from 0 to 64 [ 56.103072][ T3830] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 57.316534][ T3858] loop2: detected capacity change from 0 to 2048 [ 57.320436][ T3864] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 57.408673][ T3866] loop3: detected capacity change from 0 to 256 [ 57.419426][ T3858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.675279][ T3869] xt_CT: No such helper "snmp_trap" [ 57.786840][ T3888] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 57.845900][ T3883] loop0: detected capacity change from 0 to 4096 [ 57.898733][ T3892] loop4: detected capacity change from 0 to 64 [ 57.922552][ T3895] loop2: detected capacity change from 0 to 512 [ 57.969298][ T3892] hfs: bad catalog namelength [ 57.991005][ T3892] hfs: get root inode failed [ 58.014888][ T3898] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.052803][ T25] audit: type=1326 audit(1718224486.566:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3901 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddcd98fea9 code=0x0 [ 58.078869][ T3895] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 58.096106][ T3895] ext4 filesystem being mounted at /root/syzkaller-testdir5144382/syzkaller.mf4E2Z/20/bus supports timestamps until 2038 (0x7fffffff) [ 58.236842][ T3909] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 58.347933][ T25] audit: type=1800 audit(1718224486.856:7): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 58.394002][ T25] audit: type=1800 audit(1718224486.896:8): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 58.427209][ T3908] md0: error: bitmap file must be a regular file [ 58.446568][ T25] audit: type=1800 audit(1718224486.956:9): pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 58.467151][ T3916] loop2: detected capacity change from 0 to 256 [ 58.533742][ T3908] loop0: detected capacity change from 0 to 4096 [ 58.818717][ T3922] loop3: detected capacity change from 0 to 2048 [ 58.848822][ T3927] 7: renamed from syzkaller0 [ 58.920607][ T3922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.022147][ T3931] loop0: detected capacity change from 0 to 512 [ 59.106379][ T3933] xt_CT: No such helper "snmp_trap" [ 59.113338][ T3586] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.152994][ T3931] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 59.194332][ T3931] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.248402][ T3931] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 59.283736][ T3931] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 59.295187][ T3931] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 1 [ 59.318210][ T3931] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 59.348130][ T3931] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 59.373675][ T3931] EXT4-fs (loop0): 1 truncate cleaned up [ 59.384347][ T3931] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.499929][ T3586] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 59.509972][ T3852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.553900][ T3586] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 59.575426][ T3586] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.678078][ T3940] loop1: detected capacity change from 0 to 32768 [ 59.697508][ T3948] loop0: detected capacity change from 0 to 256 [ 59.740082][ T3586] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.755032][ T3852] usb 5-1: Using ep0 maxpacket: 16 [ 59.766190][ T3940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3940) [ 59.788618][ T3586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.805243][ T3586] usb 3-1: Product: syz [ 59.809426][ T3586] usb 3-1: Manufacturer: syz [ 59.819045][ T3586] usb 3-1: SerialNumber: syz [ 59.877472][ T3940] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 59.880028][ T3852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.904149][ T3940] BTRFS info (device loop1): using free space tree [ 59.919866][ T3940] BTRFS info (device loop1): has skinny extents [ 59.952272][ T3852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.963712][ T3852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.974103][ T3852] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.984295][ T3852] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.017302][ T3953] md0: error: bitmap file must be a regular file [ 60.071138][ T3852] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 60.085772][ T3940] BTRFS info (device loop1): enabling ssd optimizations [ 60.097150][ T3852] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 60.110031][ T3852] usb 5-1: Manufacturer: syz [ 60.122207][ T3852] usb 5-1: config 0 descriptor?? [ 60.145239][ T25] audit: type=1800 audit(1718224488.656:10): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 60.166235][ T3586] usb 3-1: 0:2 : does not exist [ 60.194601][ T3586] usb 3-1: USB disconnect, device number 2 [ 60.224796][ T3821] udevd[3821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.246709][ T3953] loop3: detected capacity change from 0 to 4096 [ 60.476384][ T25] audit: type=1326 audit(1718224488.986:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3983 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddcd98fea9 code=0x0 [ 60.501081][ T3852] rc_core: IR keymap rc-hauppauge not found [ 60.507294][ T3852] Registered IR keymap rc-empty [ 60.520194][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.550165][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.589043][ T3852] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 60.598536][ T3985] loop1: detected capacity change from 0 to 2048 [ 60.623773][ T25] audit: type=1326 audit(1718224489.136:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3986 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc144c2ea9 code=0x0 [ 60.671553][ T3852] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 60.679315][ T3989] 7: renamed from syzkaller0 [ 60.705630][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.740029][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.753592][ T3985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.799990][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.815979][ T3985] overlayfs: failed to resolve '/': -2 [ 60.832658][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.856104][ T3993] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 60.901821][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.956631][ T3999] loop4: detected capacity change from 0 to 2048 [ 60.958806][ T3995] loop2: detected capacity change from 0 to 8192 [ 60.969947][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 60.999867][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.027230][ T3999] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 61.029857][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.170456][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.180625][ T4001] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.209799][ T3852] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.319140][ T3852] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 61.510499][ T4001] netlink: zone id is out of range [ 61.515688][ T4001] netlink: zone id is out of range [ 61.542081][ T4001] netlink: zone id is out of range [ 61.553558][ T3852] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 61.566461][ T4001] netlink: zone id is out of range [ 61.586682][ T4001] netlink: zone id is out of range [ 61.608581][ T4001] netlink: zone id is out of range [ 61.612629][ T3852] usb 5-1: USB disconnect, device number 2 [ 61.666911][ T4001] netlink: zone id is out of range [ 61.712763][ T4001] netlink: zone id is out of range [ 61.727859][ T4001] netlink: zone id is out of range [ 61.735292][ T4001] netlink: zone id is out of range [ 61.936312][ T4017] loop1: detected capacity change from 0 to 512 [ 62.136414][ T4017] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.150553][ T4017] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.210772][ T4017] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 62.283230][ T4017] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 1 [ 62.317726][ T4017] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 62.433220][ T4017] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 62.494014][ T4026] loop4: detected capacity change from 0 to 2048 [ 62.513276][ T4017] EXT4-fs (loop1): 1 truncate cleaned up [ 62.518969][ T4017] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.543818][ T4033] loop2: detected capacity change from 0 to 256 [ 62.666762][ T4026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.937228][ T4038] xt_CT: No such helper "snmp_trap" [ 63.017646][ T4044] md0: error: bitmap file must be a regular file [ 63.066277][ T4048] loop1: detected capacity change from 0 to 1024 [ 63.165668][ T4048] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 63.252592][ T4049] loop2: detected capacity change from 0 to 4096 [ 63.419739][ T4056] 7: renamed from syzkaller0 [ 63.566720][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 63.566734][ T25] audit: type=1326 audit(1718224492.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4061 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52ad171ea9 code=0x0 [ 63.715448][ T4067] loop2: detected capacity change from 0 to 2048 [ 63.746754][ T4070] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 63.835037][ T4067] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 63.930909][ T4067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.278240][ T4085] loop3: detected capacity change from 0 to 256 [ 64.393603][ T4090] loop2: detected capacity change from 0 to 512 [ 64.462708][ T4090] EXT4-fs (loop2): Ignoring removed oldalloc option [ 64.509797][ T4090] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 64.523950][ T4098] loop0: detected capacity change from 0 to 47 [ 64.751802][ T4069] loop1: detected capacity change from 0 to 32768 [ 64.842478][ T4060] loop4: detected capacity change from 0 to 40427 [ 64.876761][ T4105] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 64.896020][ T4105] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.934549][ T4060] F2FS-fs (loop4): invalid crc value [ 64.940866][ T4107] 7: renamed from syzkaller0 [ 65.008269][ T4069] XFS (loop1): Mounting V5 Filesystem [ 65.072285][ T4060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.186952][ T4123] md0: error: bitmap file must be a regular file [ 65.216075][ T4060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 65.230910][ T4069] XFS (loop1): Ending clean mount [ 65.317645][ T3524] XFS (loop1): Unmounting Filesystem [ 65.343486][ T4060] attempt to access beyond end of device [ 65.343486][ T4060] loop4: rw=2049, want=45104, limit=40427 [ 65.483015][ T4128] loop0: detected capacity change from 0 to 4096 [ 65.996267][ T4132] loop1: detected capacity change from 0 to 4096 [ 66.043144][ T4132] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 66.135144][ T4132] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 66.158835][ T4134] Zero length message leads to an empty skb [ 66.379985][ T4132] loop_set_status: loop1 () has still dirty pages (nrpages=6) [ 66.417030][ T154] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 66.502117][ T25] audit: type=1326 audit(1718224494.996:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4141 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16f8945ea9 code=0x0 [ 66.555876][ T3524] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 66.748747][ T4143] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 66.935412][ T3524] syz-executor.1 (3524) used greatest stack depth: 18016 bytes left [ 67.038621][ T3627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.137978][ T3627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.144403][ T4148] loop2: detected capacity change from 0 to 64 [ 67.203011][ T4136] loop0: detected capacity change from 0 to 32768 [ 67.252670][ T4136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4136) [ 67.282307][ T3627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.341776][ T4148] hfs: bad catalog namelength [ 67.350613][ T4148] hfs: get root inode failed [ 67.387930][ T4153] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.471629][ T4136] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 67.497739][ T3627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.518593][ T4136] BTRFS info (device loop0): using free space tree [ 67.532691][ T4136] BTRFS info (device loop0): has skinny extents [ 67.931052][ T4136] BTRFS info (device loop0): enabling ssd optimizations [ 67.971287][ T25] audit: type=1800 audit(1718224496.486:15): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 68.042235][ T25] audit: type=1800 audit(1718224496.486:16): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 68.065043][ T25] audit: type=1800 audit(1718224496.536:17): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 68.087178][ T25] audit: type=1800 audit(1718224496.546:18): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 68.137404][ T4176] md0: error: bitmap file must be a regular file [ 68.381358][ T4185] loop3: detected capacity change from 0 to 4096 [ 68.606806][ T4201] loop2: detected capacity change from 0 to 512 [ 68.667932][ T4196] loop4: detected capacity change from 0 to 4096 [ 68.719268][ T4201] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.719817][ T4196] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 68.958480][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 69.255034][ T4201] EXT4-fs (loop2): failed to initialize system zone (-117) [ 69.272954][ T4201] EXT4-fs (loop2): mount failed [ 69.474819][ T4196] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 69.506890][ T4227] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.549072][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.573527][ T25] audit: type=1326 audit(1718224498.086:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4200 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 69.606129][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.615086][ T4166] device bridge_slave_0 entered promiscuous mode [ 69.636643][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.644071][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.659481][ T4166] device bridge_slave_1 entered promiscuous mode [ 69.869940][ T3850] Bluetooth: hci1: command 0x0409 tx timeout [ 69.946584][ T4188] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 69.974984][ T3523] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 70.111445][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.174473][ T4239] sp0: Synchronizing with TNC [ 70.191210][ T4238] [U] [ 70.221652][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.370064][ T4241] device syzkaller0 entered promiscuous mode [ 70.502835][ T4166] team0: Port device team_slave_0 added [ 70.537867][ T4166] team0: Port device team_slave_1 added [ 70.569521][ T25] audit: type=1326 audit(1718224499.076:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4260 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52ad171ea9 code=0x0 [ 70.712940][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.731865][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.805032][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.849983][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.868100][ T4269] loop3: detected capacity change from 0 to 256 [ 70.877596][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.915658][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.933786][ T4265] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 71.259379][ T7] cfg80211: failed to load regulatory.db [ 71.265881][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273142][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.594043][ T4287] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.925456][ T4166] device hsr_slave_0 entered promiscuous mode [ 71.955500][ T3850] Bluetooth: hci1: command 0x041b tx timeout [ 71.962051][ T4166] device hsr_slave_1 entered promiscuous mode [ 72.011282][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.027696][ T4166] Cannot create hsr debugfs directory [ 72.259183][ T4308] sp0: Synchronizing with TNC [ 72.295422][ T4307] [U] [ 72.410007][ T3627] device hsr_slave_0 left promiscuous mode [ 72.450037][ T3627] device hsr_slave_1 left promiscuous mode [ 72.497946][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.546193][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.601692][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.631244][ T4318] loop4: detected capacity change from 0 to 64 [ 72.660240][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.707962][ T3627] device bridge_slave_1 left promiscuous mode [ 72.724054][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.769291][ T3627] device bridge_slave_0 left promiscuous mode [ 72.784527][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.826181][ T4321] loop2: detected capacity change from 0 to 1764 [ 72.911402][ T3627] device veth1_macvtap left promiscuous mode [ 72.917915][ T3627] device veth0_macvtap left promiscuous mode [ 72.937501][ T3627] device veth1_vlan left promiscuous mode [ 72.953893][ T3627] device veth0_vlan left promiscuous mode [ 73.378190][ T4321] loop2: detected capacity change from 0 to 32768 [ 73.433017][ T4321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4321) [ 73.448701][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 73.479014][ T4321] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 73.497207][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 73.507869][ T4321] BTRFS info (device loop2): enabling auto defrag [ 73.537697][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.547658][ T4321] BTRFS info (device loop2): doing ref verification [ 73.559237][ T4321] BTRFS info (device loop2): max_inline at 0 [ 73.571334][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.580464][ T4321] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 73.595118][ T4321] BTRFS info (device loop2): trying to use backup root at mount time [ 73.614002][ T4321] BTRFS info (device loop2): turning on sync discard [ 73.649763][ T4321] BTRFS info (device loop2): disabling tree log [ 73.656052][ T4321] BTRFS info (device loop2): disabling free space tree [ 73.696053][ T4321] BTRFS error (device loop2): cannot disable free space tree [ 73.757385][ T3627] bond0 (unregistering): Released all slaves [ 73.772356][ T4321] BTRFS error (device loop2): open_ctree failed [ 74.020005][ T3980] Bluetooth: hci1: command 0x040f tx timeout [ 74.742385][ T4335] loop0: detected capacity change from 0 to 32768 [ 74.811301][ T4335] gfs2: Unknown parameter '@' [ 74.857534][ T4345] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.890161][ T4345] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.399899][ T3710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.639759][ T3710] usb 3-1: Using ep0 maxpacket: 32 [ 75.646339][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.668191][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.684647][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.704254][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.759978][ T3710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.829923][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.887169][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.923981][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.935182][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.950229][ T3710] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.966452][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.974452][ T3710] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.998374][ T3710] usb 3-1: Product: syz [ 76.013831][ T3710] usb 3-1: Manufacturer: syz [ 76.030158][ T3710] usb 3-1: SerialNumber: syz [ 76.057640][ T3710] usb 3-1: config 0 descriptor?? [ 76.080014][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.091045][ T4351] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.102646][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 76.108400][ T3852] Bluetooth: hci1: command 0x0419 tx timeout [ 76.109356][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.228345][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.248871][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.257873][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.265026][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.290067][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.309165][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.339493][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.346625][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.393876][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.423249][ T26] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 76.424012][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.449865][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.469742][ T26] usb 1-1: Product: syz [ 76.473917][ T26] usb 1-1: Manufacturer: syz [ 76.478507][ T26] usb 1-1: SerialNumber: syz [ 76.480553][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.510462][ T26] usb 1-1: config 0 descriptor?? [ 76.520613][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.559803][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.596831][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.615719][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.630393][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.649266][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.669401][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.690001][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.697957][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.716317][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.765702][ T3710] usb 3-1: USB disconnect, device number 3 [ 76.779878][ T26] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 76.911836][ T26] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 76.927290][ T26] dib0700: firmware download failed at 7 with -22 [ 77.025733][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.035712][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.050684][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.093036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.110452][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.207213][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.216686][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.240080][ T4166] device veth0_vlan entered promiscuous mode [ 77.254935][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.264335][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.279235][ T4166] device veth1_vlan entered promiscuous mode [ 77.386747][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.418532][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.435361][ T4166] device veth0_macvtap entered promiscuous mode [ 77.462074][ T4166] device veth1_macvtap entered promiscuous mode [ 77.494829][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.508928][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.520510][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.568336][ T4399] loop2: detected capacity change from 0 to 64 [ 77.574612][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.595495][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.606586][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.616831][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.630302][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.682574][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.695845][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.727622][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.785872][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.805819][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.827702][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.895482][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.975789][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.005206][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.042536][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.094675][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.143765][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.169143][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.205937][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.224334][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.248616][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.312164][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.349333][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368079][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.403929][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.618741][ T26] usb 1-1: USB disconnect, device number 2 [ 78.751037][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.811247][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.843560][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.903010][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.941466][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.054472][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.194586][ T4426] 7: renamed from syzkaller0 [ 79.260758][ T25] audit: type=1326 audit(1718224507.776:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52ad171ea9 code=0x0 [ 79.361924][ T4432] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.501690][ T4437] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 80.862996][ T3633] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.879507][ T4466] 7: renamed from syzkaller0 [ 81.012672][ T4469] loop0: detected capacity change from 0 to 512 [ 81.121884][ T3633] usb 3-1: Using ep0 maxpacket: 16 [ 81.131094][ T4469] EXT4-fs (loop0): Ignoring removed oldalloc option [ 81.184215][ T4469] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 81.421487][ T3633] usb 3-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 81.443814][ T3633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.477832][ T3633] usb 3-1: Product: syz [ 81.502123][ T3633] usb 3-1: Manufacturer: syz [ 81.529150][ T3633] usb 3-1: SerialNumber: syz [ 81.577926][ T3633] usb 3-1: config 0 descriptor?? [ 81.879876][ T3633] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 81.977781][ T3633] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 81.996222][ T3633] dib0700: firmware download failed at 7 with -22 [ 82.655864][ T25] audit: type=1326 audit(1718224511.166:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d1e3ea9 code=0x0 [ 82.805580][ T4484] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.933923][ T4481] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 82.969213][ T4323] syz-executor.4 (4323) used greatest stack depth: 17936 bytes left [ 83.445622][ T4503] 7: renamed from syzkaller0 [ 83.592588][ T3633] usb 3-1: USB disconnect, device number 4 [ 84.404277][ T4513] loop2: detected capacity change from 0 to 512 [ 84.538379][ T4511] loop3: detected capacity change from 0 to 32768 [ 84.570676][ T4511] gfs2: Unknown parameter '@' [ 84.590120][ T4513] EXT4-fs (loop2): Ignoring removed oldalloc option [ 84.618303][ T4513] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 85.287025][ T4525] loop3: detected capacity change from 0 to 64 [ 85.684391][ T4526] kvm: emulating exchange as write [ 86.813908][ T25] audit: type=1326 audit(1718224515.326:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 86.866693][ T4545] 7: renamed from syzkaller0 [ 86.989500][ T4547] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 87.309770][ T1067] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.636553][ T1067] usb 5-1: Using ep0 maxpacket: 16 [ 87.695920][ T4556] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.007442][ T4557] loop3: detected capacity change from 0 to 32768 [ 88.050526][ T4557] gfs2: Unknown parameter '@' [ 88.250142][ T1067] usb 5-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 88.270167][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.278521][ T1067] usb 5-1: Product: syz [ 88.307190][ T1067] usb 5-1: Manufacturer: syz [ 88.319992][ T1067] usb 5-1: SerialNumber: syz [ 88.337497][ T1067] usb 5-1: config 0 descriptor?? [ 88.629868][ T1067] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 88.636594][ T4571] loop3: detected capacity change from 0 to 256 [ 88.649773][ T1067] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 88.670019][ T1067] dib0700: firmware download failed at 7 with -22 [ 88.958359][ T4575] loop3: detected capacity change from 0 to 512 [ 89.045898][ T4575] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.058185][ T4575] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 89.108443][ T3678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.285508][ T3678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.368319][ T4572] chnl_net:caif_netlink_parms(): no params data found [ 89.407197][ T3678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.470427][ T4581] 7: renamed from syzkaller0 [ 89.536965][ T3678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.740193][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.786051][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.826728][ T4572] device bridge_slave_0 entered promiscuous mode [ 89.922311][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.931871][ T4590] loop2: detected capacity change from 0 to 64 [ 89.970594][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.997736][ T4572] device bridge_slave_1 entered promiscuous mode [ 90.118134][ T3633] usb 5-1: USB disconnect, device number 3 [ 90.562035][ T4572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.614030][ T25] audit: type=1326 audit(1718224519.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16f8945ea9 code=0x0 [ 90.668563][ T4572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.731341][ T4606] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 90.824584][ T4572] team0: Port device team_slave_0 added [ 90.878212][ T4572] team0: Port device team_slave_1 added [ 90.905268][ T1067] Bluetooth: hci4: command 0x0409 tx timeout [ 90.945408][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.000135][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.058076][ T4572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.191446][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.207912][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.236020][ T4572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.391293][ T4572] device hsr_slave_0 entered promiscuous mode [ 91.447312][ T4572] device hsr_slave_1 entered promiscuous mode [ 91.476914][ T4572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.529839][ T4572] Cannot create hsr debugfs directory [ 92.093337][ T4628] loop4: detected capacity change from 0 to 32771 [ 92.150732][ T4628] gfs2: Unknown parameter '@' [ 92.541804][ T3678] device hsr_slave_0 left promiscuous mode [ 92.572483][ T3678] device hsr_slave_1 left promiscuous mode [ 92.614074][ T4639] loop4: detected capacity change from 0 to 256 [ 92.658001][ T4641] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.680764][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.713392][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.748545][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.775789][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.838178][ T3678] device bridge_slave_1 left promiscuous mode [ 92.897369][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.983378][ T3678] device bridge_slave_0 left promiscuous mode [ 93.049888][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.083190][ T3703] Bluetooth: hci4: command 0x041b tx timeout [ 93.115297][ T4656] loop4: detected capacity change from 0 to 512 [ 93.136852][ T3678] device veth1_macvtap left promiscuous mode [ 93.154040][ T3678] device veth0_macvtap left promiscuous mode [ 93.161682][ T3678] device veth1_vlan left promiscuous mode [ 93.167567][ T3678] device veth0_vlan left promiscuous mode [ 93.204841][ T4656] EXT4-fs (loop4): Ignoring removed oldalloc option [ 93.224125][ T4656] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 93.545906][ T25] audit: type=1326 audit(1718224522.056:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 93.657958][ T3678] team0 (unregistering): Port device team_slave_1 removed [ 93.678417][ T3678] team0 (unregistering): Port device team_slave_0 removed [ 93.703208][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.721036][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.846056][ T3678] bond0 (unregistering): Released all slaves [ 93.933390][ T4664] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 94.449898][ T4685] loop1: detected capacity change from 0 to 256 [ 94.729368][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.946514][ T4698] loop1: detected capacity change from 0 to 64 [ 95.077026][ T4691] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 95.178691][ T3703] Bluetooth: hci4: command 0x040f tx timeout [ 95.277271][ T4702] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.287067][ T4691] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 95.456395][ T4572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.589528][ T4572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.666916][ T4572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.704018][ T4572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.981068][ T4572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.096570][ T4572] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.153552][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.167805][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.220205][ T25] audit: type=1326 audit(1718224524.726:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 96.292154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.310368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.318957][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.326085][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.348191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.372400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.392747][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.399882][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.459121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.485911][ T4735] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 96.498846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.552141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.587663][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.639625][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.655649][ T4740] loop3: detected capacity change from 0 to 256 [ 96.678202][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.693742][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.705847][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.733786][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.766883][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.786420][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.819381][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.893645][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.105586][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.152495][ T4748] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 97.207637][ T4748] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 97.300650][ T3703] Bluetooth: hci4: command 0x0419 tx timeout [ 97.355565][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.413122][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.461335][ T4572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.545453][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.564547][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.642455][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.664331][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.712110][ T4572] device veth0_vlan entered promiscuous mode [ 97.728349][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.744139][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.789013][ T4572] device veth1_vlan entered promiscuous mode [ 97.886353][ T4777] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.923857][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.946322][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.964666][ T4777] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.977583][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.998366][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.039941][ T4572] device veth0_macvtap entered promiscuous mode [ 98.069620][ T4572] device veth1_macvtap entered promiscuous mode [ 98.071794][ T4780] net_ratelimit: 3 callbacks suppressed [ 98.071808][ T4780] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 98.204922][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.246173][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.307099][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.349131][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.367990][ T4793] loop2: detected capacity change from 0 to 256 [ 98.371005][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.401193][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.422430][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.449840][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.471263][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.513728][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.534199][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.550429][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.601873][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.614696][ T25] audit: type=1326 audit(1718224527.126:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d1e3ea9 code=0x0 [ 98.672466][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.710159][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.776494][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.793971][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.811711][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.824647][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.848501][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.868536][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.896731][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.914454][ T4808] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 98.924085][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.988371][ T4809] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 98.996891][ T4809] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 99.006730][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.024981][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.048981][ T4572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.085036][ T4572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.104359][ T4572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.137411][ T4572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.305970][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.327548][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.384295][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.400194][ T4188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.408314][ T4188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.432545][ T4842] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 99.479939][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.646738][ T4852] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.680468][ T4856] loop1: detected capacity change from 0 to 256 [ 99.792131][ T4863] loop3: detected capacity change from 0 to 64 [ 99.963785][ T25] audit: type=1326 audit(1718224528.476:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16f8945ea9 code=0x0 [ 100.105346][ T4880] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 100.187945][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.219380][ T4884] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 100.232423][ T4884] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 100.276385][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.335725][ T4894] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 101.075312][ T4919] loop1: detected capacity change from 0 to 256 [ 101.586750][ T4939] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 101.759223][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.913814][ T4942] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 101.983956][ T4942] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 102.042794][ T25] audit: type=1326 audit(1718224530.556:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d1e3ea9 code=0x0 [ 102.148703][ T4953] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 102.288956][ T4962] loop4: detected capacity change from 0 to 256 [ 102.430611][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.463525][ T4966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.576975][ T4971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.587463][ T4971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.596211][ T4971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.604930][ T4971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.696503][ T4973] 7: renamed from syzkaller0 [ 102.988583][ T4997] loop4: detected capacity change from 0 to 256 [ 103.055055][ T5002] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.308405][ T5009] loop0: detected capacity change from 0 to 7 [ 103.342226][ T5009] Dev loop0: unable to read RDB block 7 [ 103.350132][ T5009] loop0: unable to read partition table [ 103.350482][ T5010] 7: renamed from syzkaller0 [ 103.375494][ T5009] loop0: partition table beyond EOD, truncated [ 103.389276][ T5009] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 103.389276][ T5009] ) failed (rc=-5) [ 103.496877][ T25] audit: type=1326 audit(1718224532.006:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d1e3ea9 code=0x0 [ 103.605636][ T5025] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 103.667577][ T5029] loop3: detected capacity change from 0 to 256 [ 104.158810][ T5048] 7: renamed from syzkaller0 [ 104.432892][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.439030][ T5057] loop4: detected capacity change from 0 to 256 [ 104.458938][ T5058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.604890][ T5060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.613866][ T5060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.622628][ T5060] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.631373][ T5060] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.755101][ T5066] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.002370][ T5076] 7: renamed from syzkaller0 [ 105.050869][ T25] audit: type=1326 audit(1718224533.566:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2ab7dea9 code=0x0 [ 105.160489][ T5087] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 105.264641][ T5089] loop1: detected capacity change from 0 to 256 [ 105.575276][ T5097] device syzkaller0 entered promiscuous mode [ 105.721901][ T5113] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.788651][ T5110] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 105.798446][ T5110] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5110, name: syz-executor.4 [ 105.807820][ T5110] 2 locks held by syz-executor.4/5110: [ 105.813257][ T5110] #0: ffff8880597d14c8 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 105.823789][ T5110] #1: ffffffff8c9455d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 105.833507][ T5110] irq event stamp: 588 [ 105.837561][ T5110] hardirqs last enabled at (587): [] queue_delayed_work_on+0x171/0x250 [ 105.847425][ T5110] hardirqs last disabled at (588): [] _raw_spin_lock_irq+0xa9/0x110 [ 105.857048][ T5110] softirqs last enabled at (470): [] ip_setsockopt+0x260e/0x3fb0 [ 105.866391][ T5110] softirqs last disabled at (468): [] release_sock+0x2c/0x1c0 [ 105.875468][ T5110] Preemption disabled at: [ 105.875473][ T5110] [<0000000000000000>] 0x0 [ 105.884175][ T5110] CPU: 0 PID: 5110 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 105.892655][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.902732][ T5110] Call Trace: [ 105.906014][ T5110] [ 105.908933][ T5110] dump_stack_lvl+0x1e3/0x2d0 [ 105.913591][ T5110] ? ip_setsockopt+0x260e/0x3fb0 [ 105.918513][ T5110] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 105.924138][ T5110] ? panic+0x860/0x860 [ 105.928294][ T5110] ___might_sleep+0x547/0x6a0 [ 105.932992][ T5110] ? __might_sleep+0xc0/0xc0 [ 105.937562][ T5110] down_read+0x21/0x2e0 [ 105.941719][ T5110] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 105.947154][ T5110] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 105.952441][ T5110] ? kernfs_find_ns+0x500/0x500 [ 105.957266][ T5110] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 105.963390][ T5110] cgroup_get_from_path+0x5c/0x2e0 [ 105.968472][ T5110] cgroup_mt_check_v1+0x1a0/0x2b0 [ 105.973495][ T5110] xt_check_match+0x363/0xa30 [ 105.978143][ T5110] ? xt_find_match+0x6d/0x200 [ 105.982800][ T5110] ? mutex_unlock+0x10/0x10 [ 105.987275][ T5110] ? xt_check_proc_name+0x110/0x110 [ 105.992443][ T5110] ? pcpu_alloc+0x10c9/0x17c0 [ 105.997097][ T5110] ? xt_find_match+0x1cf/0x200 [ 106.001838][ T5110] translate_table+0x15bd/0x2250 [ 106.006764][ T5110] ? ipt_register_table+0x7a0/0x7a0 [ 106.011932][ T5110] ? __might_fault+0xb8/0x110 [ 106.016582][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.021584][ T5110] ? _copy_from_user+0x10f/0x170 [ 106.026494][ T5110] ? copy_from_sockptr_offset+0x6b/0xa0 [ 106.032042][ T5110] do_ipt_set_ctl+0xdbc/0x1200 [ 106.036792][ T5110] ? rcu_lock_release+0x20/0x20 [ 106.041653][ T5110] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 106.047442][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.052453][ T5110] ? __mutex_unlock_slowpath+0x218/0x750 [ 106.058058][ T5110] ? nf_setsockopt+0x38/0x2b0 [ 106.062710][ T5110] ? print_irqtrace_events+0x210/0x210 [ 106.068141][ T5110] ? mutex_unlock+0x10/0x10 [ 106.072625][ T5110] ? lockdep_hardirqs_on+0x94/0x130 [ 106.077886][ T5110] ? __local_bh_enable_ip+0x164/0x1f0 [ 106.083244][ T5110] nf_setsockopt+0x28a/0x2b0 [ 106.087903][ T5110] ip_setsockopt+0x2732/0x3fb0 [ 106.092646][ T5110] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 106.098001][ T5110] ? read_lock_is_recursive+0x10/0x10 [ 106.103349][ T5110] ? __mutex_trylock_common+0x17e/0x2e0 [ 106.108893][ T5110] ? __might_sleep+0xc0/0xc0 [ 106.113457][ T5110] ? rcu_lock_release+0x20/0x20 [ 106.118281][ T5110] tcp_setsockopt+0x23f/0x3680 [ 106.123020][ T5110] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 106.128362][ T5110] ? __might_sleep+0xc0/0xc0 [ 106.132926][ T5110] ? smc_setsockopt+0x130/0xb20 [ 106.137752][ T5110] ? mutex_lock_io_nested+0x60/0x60 [ 106.142925][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.147925][ T5110] ? aa_sk_perm+0x8fc/0xa30 [ 106.152403][ T5110] ? sock_common_setsockopt+0x33/0xc0 [ 106.157748][ T5110] ? sock_common_recvmsg+0x240/0x240 [ 106.163007][ T5110] smc_setsockopt+0x1e5/0xb20 [ 106.167660][ T5110] ? smc_shutdown+0x5f0/0x5f0 [ 106.172312][ T5110] ? aa_sock_opt_perm+0x79/0x110 [ 106.177220][ T5110] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 106.182735][ T5110] ? security_socket_setsockopt+0x7d/0xa0 [ 106.188426][ T5110] ? smc_shutdown+0x5f0/0x5f0 [ 106.193093][ T5110] __sys_setsockopt+0x57e/0x990 [ 106.197923][ T5110] ? __ia32_sys_recv+0xb0/0xb0 [ 106.202664][ T5110] ? syscall_enter_from_user_mode+0x2e/0x240 [ 106.208621][ T5110] __x64_sys_setsockopt+0xb1/0xc0 [ 106.213616][ T5110] do_syscall_64+0x3b/0xb0 [ 106.218003][ T5110] ? clear_bhb_loop+0x15/0x70 [ 106.222650][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.228513][ T5110] RIP: 0033:0x7f16f8945ea9 [ 106.232905][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 106.252479][ T5110] RSP: 002b:00007f16f74bf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.260862][ T5110] RAX: ffffffffffffffda RBX: 00007f16f8a7cf80 RCX: 00007f16f8945ea9 [ 106.268834][ T5110] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000007 [ 106.276806][ T5110] RBP: 00007f16f89b4ff4 R08: 0000000000001378 R09: 0000000000000000 [ 106.284750][ T5110] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 106.292692][ T5110] R13: 000000000000000b R14: 00007f16f8a7cf80 R15: 00007ffcbdac22f8 [ 106.300667][ T5110] [ 106.303681][ T5110] [ 106.305974][ T5110] ============================= [ 106.310786][ T5110] [ BUG: Invalid wait context ] [ 106.315597][ T5110] 5.15.160-syzkaller #0 Tainted: G W [ 106.322150][ T5110] ----------------------------- [ 106.326970][ T5110] syz-executor.4/5110 is trying to lock: [ 106.332677][ T5110] ffffffff8ca52310 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 106.342232][ T5110] other info that might help us debug this: [ 106.348095][ T5110] context-{4:4} [ 106.351519][ T5110] 2 locks held by syz-executor.4/5110: [ 106.356941][ T5110] #0: ffff8880597d14c8 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 106.367434][ T5110] #1: ffffffff8c9455d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 106.377151][ T5110] stack backtrace: [ 106.380837][ T5110] CPU: 0 PID: 5110 Comm: syz-executor.4 Tainted: G W 5.15.160-syzkaller #0 [ 106.390701][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.400752][ T5110] Call Trace: [ 106.404001][ T5110] [ 106.406914][ T5110] dump_stack_lvl+0x1e3/0x2d0 [ 106.411575][ T5110] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 106.417184][ T5110] ? panic+0x860/0x860 [ 106.421224][ T5110] __lock_acquire+0x14f5/0x1ff0 [ 106.426046][ T5110] lock_acquire+0x1db/0x4f0 [ 106.430514][ T5110] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 106.435942][ T5110] ? read_lock_is_recursive+0x10/0x10 [ 106.441280][ T5110] ? __might_sleep+0xc0/0xc0 [ 106.445843][ T5110] down_read+0x45/0x2e0 [ 106.449967][ T5110] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 106.455394][ T5110] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 106.460837][ T5110] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 106.466093][ T5110] ? kernfs_find_ns+0x500/0x500 [ 106.470911][ T5110] ? current_cgns_cgroup_from_root+0x2ad/0x300 [ 106.477035][ T5110] cgroup_get_from_path+0x5c/0x2e0 [ 106.482118][ T5110] cgroup_mt_check_v1+0x1a0/0x2b0 [ 106.487115][ T5110] xt_check_match+0x363/0xa30 [ 106.491764][ T5110] ? xt_find_match+0x6d/0x200 [ 106.496412][ T5110] ? mutex_unlock+0x10/0x10 [ 106.500885][ T5110] ? xt_check_proc_name+0x110/0x110 [ 106.506052][ T5110] ? pcpu_alloc+0x10c9/0x17c0 [ 106.510701][ T5110] ? xt_find_match+0x1cf/0x200 [ 106.515444][ T5110] translate_table+0x15bd/0x2250 [ 106.520378][ T5110] ? ipt_register_table+0x7a0/0x7a0 [ 106.525544][ T5110] ? __might_fault+0xb8/0x110 [ 106.530193][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.535186][ T5110] ? _copy_from_user+0x10f/0x170 [ 106.540093][ T5110] ? copy_from_sockptr_offset+0x6b/0xa0 [ 106.545608][ T5110] do_ipt_set_ctl+0xdbc/0x1200 [ 106.550340][ T5110] ? rcu_lock_release+0x20/0x20 [ 106.555160][ T5110] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 106.560934][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.565935][ T5110] ? __mutex_unlock_slowpath+0x218/0x750 [ 106.571536][ T5110] ? nf_setsockopt+0x38/0x2b0 [ 106.576181][ T5110] ? print_irqtrace_events+0x210/0x210 [ 106.581608][ T5110] ? mutex_unlock+0x10/0x10 [ 106.586079][ T5110] ? lockdep_hardirqs_on+0x94/0x130 [ 106.591244][ T5110] ? __local_bh_enable_ip+0x164/0x1f0 [ 106.596584][ T5110] nf_setsockopt+0x28a/0x2b0 [ 106.601145][ T5110] ip_setsockopt+0x2732/0x3fb0 [ 106.605903][ T5110] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 106.611244][ T5110] ? read_lock_is_recursive+0x10/0x10 [ 106.616588][ T5110] ? __mutex_trylock_common+0x17e/0x2e0 [ 106.622102][ T5110] ? __might_sleep+0xc0/0xc0 [ 106.626662][ T5110] ? rcu_lock_release+0x20/0x20 [ 106.631480][ T5110] tcp_setsockopt+0x23f/0x3680 [ 106.636212][ T5110] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 106.641575][ T5110] ? __might_sleep+0xc0/0xc0 [ 106.646136][ T5110] ? smc_setsockopt+0x130/0xb20 [ 106.650955][ T5110] ? mutex_lock_io_nested+0x60/0x60 [ 106.656120][ T5110] ? __lock_acquire+0x1ff0/0x1ff0 [ 106.661129][ T5110] ? aa_sk_perm+0x8fc/0xa30 [ 106.665637][ T5110] ? sock_common_setsockopt+0x33/0xc0 [ 106.671008][ T5110] ? sock_common_recvmsg+0x240/0x240 [ 106.676259][ T5110] smc_setsockopt+0x1e5/0xb20 [ 106.680907][ T5110] ? smc_shutdown+0x5f0/0x5f0 [ 106.685553][ T5110] ? aa_sock_opt_perm+0x79/0x110 [ 106.690457][ T5110] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 106.695968][ T5110] ? security_socket_setsockopt+0x7d/0xa0 [ 106.701654][ T5110] ? smc_shutdown+0x5f0/0x5f0 [ 106.706301][ T5110] __sys_setsockopt+0x57e/0x990 [ 106.711124][ T5110] ? __ia32_sys_recv+0xb0/0xb0 [ 106.715857][ T5110] ? syscall_enter_from_user_mode+0x2e/0x240 [ 106.721806][ T5110] __x64_sys_setsockopt+0xb1/0xc0 [ 106.726800][ T5110] do_syscall_64+0x3b/0xb0 [ 106.731183][ T5110] ? clear_bhb_loop+0x15/0x70 [ 106.735836][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.741696][ T5110] RIP: 0033:0x7f16f8945ea9 [ 106.746082][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 106.765674][ T5110] RSP: 002b:00007f16f74bf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.774057][ T5110] RAX: ffffffffffffffda RBX: 00007f16f8a7cf80 RCX: 00007f16f8945ea9 [ 106.781997][ T5110] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000007 2024/06/12 20:35:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 106.789945][ T5110] RBP: 00007f16f89b4ff4 R08: 0000000000001378 R09: 0000000000000000 [ 106.797907][ T5110] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 106.805845][ T5110] R13: 000000000000000b R14: 00007f16f8a7cf80 R15: 00007ffcbdac22f8 [ 106.813796][ T5110] [ 106.865906][ T5119] 7: renamed from syzkaller0 [ 106.879867][ T5110] xt_cgroup: invalid path, errno=-2