last executing test programs: 3m1.878078836s ago: executing program 0 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 3m1.763034598s ago: executing program 0 (id=89): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) sendmmsg$inet6(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="9d8d", 0x2}], 0x1}}], 0x1, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.63756843s ago: executing program 0 (id=91): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x80, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x781, &(0x7f0000002200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x482, 0x0) pwrite64(r3, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) tkill(r2, 0x12) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18) 2m58.440409078s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 2m58.285578161s ago: executing program 0 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r6, 0x7}, 0x8) 2m57.827950308s ago: executing program 0 (id=106): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) 2m57.775818168s ago: executing program 32 (id=106): syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) 2m55.169352918s ago: executing program 3 (id=115): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/27, 0x1b}], 0x5, 0x154, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, [0x400]}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$rfkill(r2, &(0x7f00000000c0)={0xdd0, 0x6, 0x2}, 0x8) 2m51.411863685s ago: executing program 3 (id=134): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="2b0d911f56551ad9ff000000000000", 0xf}, {&(0x7f0000001240)="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", 0x472}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m51.231941038s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000056e000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) 2m51.09078616s ago: executing program 3 (id=140): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) ppoll(&(0x7f0000000180)=[{r0, 0x600}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(0x4) 2m50.944790692s ago: executing program 3 (id=142): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40049366, 0x0) 2m50.838083354s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 2m35.609118094s ago: executing program 33 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 9.801878682s ago: executing program 1 (id=657): chdir(0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40e00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) 9.798078102s ago: executing program 5 (id=667): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$dsp1(0xffffffffffffff9c, 0x0, 0xc0003, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x80000000, 0x0, 0x1}}, 0xb8}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}}, 0x0) 9.629087784s ago: executing program 4 (id=661): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}}}}}}}, 0x0) 9.627411124s ago: executing program 1 (id=672): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d5, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) 8.683709529s ago: executing program 6 (id=662): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 8.682470839s ago: executing program 2 (id=674): r0 = io_uring_setup(0x1695, &(0x7f0000000080)={0x0, 0xfffffffe, 0x80, 0x1, 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000182000/0xc000)=nil, 0xc000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.56126458s ago: executing program 6 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.56104404s ago: executing program 4 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 7.624164465s ago: executing program 2 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x1d, 0xffffffffffffffff}]}, 0x28}}, 0x0) 6.499267792s ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.499046472s ago: executing program 1 (id=668): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) syz_open_procfs(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, 0x0, 0x0) 6.498915332s ago: executing program 2 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) write$FUSE_STATFS(r1, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0xfff, 0xffffffff, 0x40, 0x100000000, 0xbdd, 0x8001, 0x1, 0xd93}}}, 0x60) 6.498818132s ago: executing program 4 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 6.242060305s ago: executing program 6 (id=671): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) getrlimit(0xa, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close_range(r0, 0xffffffffffffffff, 0x0) 5.026744604s ago: executing program 5 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.025449004s ago: executing program 4 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 4.796561917s ago: executing program 1 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r3, 0x10001, 0x0) 4.796387088s ago: executing program 2 (id=676): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}}}}}}}, 0x0) 4.225704776s ago: executing program 2 (id=677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.076038098s ago: executing program 5 (id=678): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000400000004000000ffffffff04"], 0x50) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000a00)}}], 0x1, 0x40088d5) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0xd6e, 0x6, 0x1, 0x1, 0x101, 0x5, 0x80000000, 0xa67, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0x4, @empty, 0x80}}, 0x0, 0xfffc}, 0x90) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4.075169418s ago: executing program 4 (id=679): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in=@local, 0x4d5, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x100}, {0x5, 0x2000000000, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) 3.359309969s ago: executing program 1 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x1d, 0xffffffffffffffff}]}, 0x28}}, 0x0) 3.227867901s ago: executing program 6 (id=681): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3.226637261s ago: executing program 5 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) ioctl$BLKRRPART(r4, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.071692124s ago: executing program 2 (id=683): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$dsp1(0xffffffffffffff9c, 0x0, 0xc0003, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x80000000, 0x0, 0x1}}, 0xb8}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}}, 0x0) 1.063527484s ago: executing program 1 (id=694): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) 1.062416044s ago: executing program 5 (id=685): syz_open_dev$loop(0x0, 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 972.657036ms ago: executing program 6 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 9.67613ms ago: executing program 6 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 38.068012][ T4285] cgroup: Unknown subsys name 'net' [ 38.309410][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.619574][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 40.155619][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.158514][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.161269][ T4301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.163930][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.166796][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.168815][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.174627][ T4301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.176911][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.179134][ T4301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.191296][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.194665][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.196850][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.244919][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.247986][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.250647][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.253551][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.264030][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 40.266488][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.288047][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 40.296115][ T4301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.298778][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.303733][ T4301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.307089][ T4301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.308855][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.310145][ T4301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.311891][ T4299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.313464][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.319796][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.331220][ T4297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.334788][ T4297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 40.336912][ T4297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.414861][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.417219][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.419754][ T4296] device bridge_slave_0 entered promiscuous mode [ 40.423719][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.426299][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.428696][ T4296] device bridge_slave_1 entered promiscuous mode [ 40.453787][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.468086][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.514435][ T4296] team0: Port device team_slave_0 added [ 40.518505][ T4296] team0: Port device team_slave_1 added [ 40.541620][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.543578][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.560049][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.566035][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 40.571776][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.573632][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.581289][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.608147][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 40.715951][ T4296] device hsr_slave_0 entered promiscuous mode [ 40.754697][ T4296] device hsr_slave_1 entered promiscuous mode [ 40.824454][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.826633][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.829188][ T4305] device bridge_slave_0 entered promiscuous mode [ 40.832238][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.834612][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.836999][ T4305] device bridge_slave_1 entered promiscuous mode [ 40.868348][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.890794][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.893397][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 40.903934][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.906329][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.909393][ T4300] device bridge_slave_0 entered promiscuous mode [ 40.940981][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.943026][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.946333][ T4300] device bridge_slave_1 entered promiscuous mode [ 40.950203][ T4305] team0: Port device team_slave_0 added [ 40.955343][ T4305] team0: Port device team_slave_1 added [ 40.972184][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 40.989081][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.991022][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.998381][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.020467][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.022428][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.029851][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.035530][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.053065][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.070296][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.072304][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.075338][ T4309] device bridge_slave_0 entered promiscuous mode [ 41.094283][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.096535][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.100984][ T4309] device bridge_slave_1 entered promiscuous mode [ 41.107964][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.109949][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.112396][ T4304] device bridge_slave_0 entered promiscuous mode [ 41.116319][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.118271][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.120887][ T4304] device bridge_slave_1 entered promiscuous mode [ 41.138410][ T4300] team0: Port device team_slave_0 added [ 41.215883][ T4305] device hsr_slave_0 entered promiscuous mode [ 41.264545][ T4305] device hsr_slave_1 entered promiscuous mode [ 41.324303][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.326570][ T4305] Cannot create hsr debugfs directory [ 41.329318][ T4300] team0: Port device team_slave_1 added [ 41.332340][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.336872][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.368814][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.372700][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.378008][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.379963][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.387143][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.411485][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.413407][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.420426][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.442568][ T4304] team0: Port device team_slave_0 added [ 41.446108][ T4309] team0: Port device team_slave_0 added [ 41.450386][ T4304] team0: Port device team_slave_1 added [ 41.470584][ T4309] team0: Port device team_slave_1 added [ 41.482019][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.483913][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.491284][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.528080][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.529918][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.537431][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.585868][ T4300] device hsr_slave_0 entered promiscuous mode [ 41.624699][ T4300] device hsr_slave_1 entered promiscuous mode [ 41.664229][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.666297][ T4300] Cannot create hsr debugfs directory [ 41.668300][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.670180][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.677638][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.690270][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.726141][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.766684][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.768629][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.778645][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.788693][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.825885][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.955942][ T4304] device hsr_slave_0 entered promiscuous mode [ 41.994561][ T4304] device hsr_slave_1 entered promiscuous mode [ 42.034717][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.036827][ T4304] Cannot create hsr debugfs directory [ 42.095878][ T4309] device hsr_slave_0 entered promiscuous mode [ 42.134437][ T4309] device hsr_slave_1 entered promiscuous mode [ 42.174292][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.176379][ T4309] Cannot create hsr debugfs directory [ 42.264631][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 42.266477][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 42.272679][ T4305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.302673][ T4305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.344562][ T4297] Bluetooth: hci4: command 0x0409 tx timeout [ 42.344604][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 42.354572][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 42.379416][ T4305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.417514][ T4305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.536260][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.541133][ T4300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.566004][ T4300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.610758][ T4300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.653018][ T4300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.705458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.708818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.725843][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.731038][ T4309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.766014][ T4309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.806048][ T4309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.850791][ T4309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.911779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.914877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.919303][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.921414][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.925097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.927803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.930440][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.932406][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.935117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.937979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.940692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.961088][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.964780][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.968004][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.970702][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.989427][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.993812][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.997722][ T4304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.035376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.038851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.042825][ T4304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.109039][ T4304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.160701][ T4304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.207177][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.210007][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.212572][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.215668][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.219385][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.233580][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.249988][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.257437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.260097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.262847][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.264824][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.287105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.289694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.292418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.300957][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.302919][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.310970][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.329344][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.332211][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.348330][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.351716][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.354724][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.357396][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.360449][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.381090][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.383644][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.388409][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.391136][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.393567][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.397052][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.400500][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.402982][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.404917][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.407576][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.414509][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.424528][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.427579][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.430215][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.432817][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.436648][ T1863] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.438675][ T1863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.441086][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.446136][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.448788][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.463403][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.467119][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.469686][ T1863] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.471600][ T1863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.473921][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.484000][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.491560][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.493615][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.498172][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.500678][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.502601][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.506607][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.509431][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.511564][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.513629][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.517210][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.520019][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.526600][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.530035][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.539958][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.557644][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.560443][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.563160][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.567508][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.570235][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.587755][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.592167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.594811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.597472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.600251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.602831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.606306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.612123][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.616374][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.627628][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.630217][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.632834][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.636743][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.639312][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.641233][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.657156][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.659821][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.662759][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.665832][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.668649][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.679632][ T4300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.682399][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.690034][ T4296] device veth0_vlan entered promiscuous mode [ 43.693631][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.696757][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.699179][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.702695][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.712848][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.714882][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.718806][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.721813][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.730165][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.733529][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.736564][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.740161][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.751054][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.754228][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.757170][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.759927][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.762634][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.779610][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.782073][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.790380][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.795151][ T4296] device veth1_vlan entered promiscuous mode [ 43.818168][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.820839][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.823655][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.828809][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.835802][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.840858][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.843054][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.858356][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.862791][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.871418][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.877282][ T4296] device veth0_macvtap entered promiscuous mode [ 43.892672][ T4296] device veth1_macvtap entered promiscuous mode [ 43.900741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.903327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.906783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.909783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.919726][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.923922][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.937663][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.940278][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.942742][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.946551][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.950758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.953997][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.959624][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.962268][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.976975][ T4305] device veth0_vlan entered promiscuous mode [ 43.983989][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.991356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.993454][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.997882][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.003368][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.013772][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.017943][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.022437][ T4305] device veth1_vlan entered promiscuous mode [ 44.068438][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.070978][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.073607][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.076704][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.080615][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.116417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.119181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.121938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.127391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.156478][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.161486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.163670][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.180809][ T4305] device veth0_macvtap entered promiscuous mode [ 44.183863][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.186966][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.192925][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.195839][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.205790][ T4305] device veth1_macvtap entered promiscuous mode [ 44.206036][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.209848][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.213246][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.217157][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.221884][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.232122][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.237974][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.240558][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.243307][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.248536][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.251509][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.272163][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.275362][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.278685][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.281054][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.283522][ T4309] device veth0_vlan entered promiscuous mode [ 44.287517][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.290428][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.298341][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.301034][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.303720][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.313033][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.319549][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.322219][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.327800][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.330264][ T4300] device veth0_vlan entered promiscuous mode [ 44.340261][ T4309] device veth1_vlan entered promiscuous mode [ 44.345420][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 44.347131][ T4303] Bluetooth: hci1: command 0x041b tx timeout [ 44.391531][ T4309] device veth0_macvtap entered promiscuous mode [ 44.395028][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.397563][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.400184][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.402969][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.421974][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.425463][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 44.427120][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 44.428991][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.431357][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.433651][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.436386][ T4303] Bluetooth: hci4: command 0x041b tx timeout [ 44.447131][ T4309] device veth1_macvtap entered promiscuous mode [ 44.458423][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.468326][ T4375] loop0: detected capacity change from 0 to 1024 [ 44.479708][ T4375] ======================================================= [ 44.479708][ T4375] WARNING: The mand mount option has been deprecated and [ 44.479708][ T4375] and is ignored by this kernel. Remove the mand [ 44.479708][ T4375] option from the mount to silence this warning. [ 44.479708][ T4375] ======================================================= [ 44.497616][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.500480][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.503955][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.508403][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.512787][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.517471][ T4300] device veth1_vlan entered promiscuous mode [ 44.519996][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.522702][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.525374][ T4375] EXT4-fs: Ignoring removed nobh option [ 44.526870][ T4375] EXT4-fs: Ignoring removed bh option [ 44.537528][ T4375] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.537637][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.543515][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.566580][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.570111][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.573032][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.577033][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.581047][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.581731][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.598557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.601306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.604832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.611719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.621835][ T4304] device veth0_vlan entered promiscuous mode [ 44.634377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.637096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.686216][ T4309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.688852][ T4309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.691621][ T4309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.696786][ T4309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.701686][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 44.716626][ T1863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.718866][ T1863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.722868][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.733204][ T4300] device veth0_macvtap entered promiscuous mode [ 44.782836][ T4304] device veth1_vlan entered promiscuous mode [ 44.791842][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.794702][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.797337][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.800002][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.803610][ T4381] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 44.822668][ T4300] device veth1_macvtap entered promiscuous mode [ 44.865275][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.867501][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.883775][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.889050][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.891791][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.895049][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.897867][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.900733][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.906327][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.908736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.911478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.914167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.916599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.919223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.960984][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.964889][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.967746][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.970694][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.973444][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.976851][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.981525][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.983987][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.992724][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.995150][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.998611][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.002044][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.010384][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.015062][ T4304] device veth0_macvtap entered promiscuous mode [ 45.061921][ T4384] loop0: detected capacity change from 0 to 256 [ 45.071257][ T4304] device veth1_macvtap entered promiscuous mode [ 45.082315][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.085023][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.087472][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.101185][ T4300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.103716][ T4300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.106724][ T4300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.109068][ T4300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.123366][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.132347][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.142930][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.148314][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.150939][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.153694][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.156909][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.159875][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.165468][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.180807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.183739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.187724][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.189961][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.192984][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.228695][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.242355][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.248118][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.251494][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.255391][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.258109][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.260654][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.263488][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.293504][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.322859][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.326265][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.346405][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.349215][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.351667][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.354052][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.512010][ T4386] loop1: detected capacity change from 0 to 32768 [ 45.517565][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.519766][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.522935][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.565534][ T4386] (syz.1.2,4386,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.569396][ T662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.571616][ T662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.581925][ T4386] (syz.1.2,4386,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 45.602271][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.604862][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.608390][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.610820][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.646834][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.654954][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.657614][ T4386] JBD2: Ignoring recovery information on journal [ 45.667724][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.699858][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 45.722708][ T4386] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 45.857274][ T4406] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 45.877034][ T4406] device gre0 entered promiscuous mode [ 45.979895][ T4305] ocfs2: Unmounting device (7,1) on (node local) [ 46.311333][ T4416] netlink: del zone limit has 4 unknown bytes [ 47.576277][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 47.577924][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 47.579553][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 47.581232][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 47.582875][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 48.153487][ T4445] loop3: detected capacity change from 0 to 128 [ 48.581990][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 48.665430][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.544632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.624849][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 49.627446][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 49.629852][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 49.631832][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 49.634250][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 49.705371][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.152714][ T27] audit: type=1326 audit(50.120:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 50.171097][ T27] audit: type=1326 audit(50.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 50.195789][ T4489] loop1: detected capacity change from 0 to 1024 [ 50.227229][ T27] audit: type=1326 audit(50.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 50.243186][ T4489] hfsplus: bad catalog entry used to create inode [ 50.251045][ T4489] hfsplus: failed to load root directory [ 50.333224][ T27] audit: type=1326 audit(50.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.38" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9135a8a8 code=0x0 [ 51.060625][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.110702][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.533106][ T4514] loop0: detected capacity change from 0 to 128 [ 51.581148][ T4514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.743819][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 51.790120][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 51.885902][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.888712][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.892872][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.900858][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.903813][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.906462][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.909048][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.911530][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.928820][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.933770][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.520566][ T4537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.513415][ T27] audit: type=1326 audit(55.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55a8a8 code=0x0 [ 55.673471][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 56.784332][ T4578] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 56.812764][ T4580] loop3: detected capacity change from 0 to 1024 [ 56.829018][ T4579] loop1: detected capacity change from 0 to 512 [ 56.840533][ T4580] hfsplus: bad catalog entry used to create inode [ 56.842450][ T4580] hfsplus: failed to load root directory [ 56.853465][ T4579] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 56.854829][ T4578] device ip6erspan0 entered promiscuous mode [ 56.877937][ T4579] EXT4-fs (loop1): 1 truncate cleaned up [ 56.879728][ T4579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.901291][ T4290] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.969350][ T4579] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.62: lblock 0 mapped to illegal pblock 4 (length 1) [ 56.980719][ T4579] EXT4-fs (loop1): Remounting filesystem read-only [ 57.013848][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 57.464455][ C0] net_ratelimit: 924 callbacks suppressed [ 57.464470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.124228][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.132476][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.787693][ T4598] netlink: 'syz.4.79': attribute type 4 has an invalid length. [ 59.513539][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.702950][ T4610] loop1: detected capacity change from 0 to 256 [ 59.871975][ T4613] netlink: del zone limit has 4 unknown bytes [ 60.614381][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.656957][ T4618] binder: 4616:4618 tried to acquire reference to desc 0, got 1 instead [ 60.663794][ T4618] binder: 4616:4618 got reply transaction with bad transaction stack, transaction 5 has target 4616:0 [ 60.672632][ T4618] binder: 4616:4618 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2970 [ 60.683970][ T4287] binder: release 4616:4618 transaction 5 out, still active [ 60.711471][ T4287] binder: send failed reply for transaction 5, target dead [ 60.832719][ T4624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.878393][ T4623] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 60.912730][ T4630] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 60.932260][ T4630] device veth1_virt_wifi entered promiscuous mode [ 61.079049][ T4637] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 61.858454][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.891102][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.029356][ T4649] netlink: 'syz.0.86': attribute type 12 has an invalid length. [ 62.978993][ T4297] Bluetooth: hci4: command 0x0405 tx timeout [ 62.995900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.073997][ T4672] loop4: detected capacity change from 0 to 512 [ 63.134382][ T4672] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 64.388160][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.514951][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516882][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.425087][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.474809][ T4287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.549185][ T4687] loop4: detected capacity change from 0 to 32768 [ 65.569357][ T4687] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.96 (4687) [ 65.609319][ T4687] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 65.612427][ T4687] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 65.627141][ T4687] BTRFS info (device loop4): using free space tree [ 65.720545][ T4687] BTRFS info (device loop4): enabling ssd optimizations [ 65.870287][ T4304] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 65.909760][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 65.915546][ T4718] netlink: 1 bytes leftover after parsing attributes in process `syz.3.105'. [ 65.973671][ T4288] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop4 scanned by udevd (4288) [ 66.136912][ T4731] binder: 4730:4731 tried to acquire reference to desc 0, got 1 instead [ 66.148740][ T4731] binder: 4730:4731 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 66.160218][ T14] binder: undelivered TRANSACTION_COMPLETE [ 66.211081][ T4347] binder: undelivered transaction 11, process died. [ 66.360372][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.368026][ T4486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.371803][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.378025][ T4297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.383328][ T4297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.386237][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.388443][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.257009][ T4486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.267138][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 67.278317][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 67.376943][ T4486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.385153][ T4747] Zero length message leads to an empty skb [ 67.470671][ T4486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.539248][ T4735] chnl_net:caif_netlink_parms(): no params data found [ 67.568548][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.570745][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.573279][ T4735] device bridge_slave_0 entered promiscuous mode [ 67.578127][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580075][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.582771][ T4735] device bridge_slave_1 entered promiscuous mode [ 67.597884][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.602195][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.616880][ T4735] team0: Port device team_slave_0 added [ 67.620182][ T4735] team0: Port device team_slave_1 added [ 67.633621][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.635700][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.642654][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.646874][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.648720][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.655785][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.736737][ T4735] device hsr_slave_0 entered promiscuous mode [ 67.774526][ T4735] device hsr_slave_1 entered promiscuous mode [ 67.814248][ T4735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.816389][ T4735] Cannot create hsr debugfs directory [ 67.959192][ T4735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.996064][ T4735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.025986][ T4735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.168042][ T4735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.267735][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.269862][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.272681][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.274966][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.282280][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.286983][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.389562][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.424440][ T4297] Bluetooth: hci0: command 0x0409 tx timeout [ 68.441859][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.451053][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.460255][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.462628][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.467090][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.469766][ T4484] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.471757][ T4484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.481508][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.485140][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.488260][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490234][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.492601][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.506491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.561002][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.564727][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.570581][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.583537][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.586802][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.589652][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.592456][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.636304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.639610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.644658][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.749452][ T4792] loop2: detected capacity change from 0 to 1024 [ 68.751856][ T4792] EXT4-fs: inline encryption not supported [ 68.753477][ T4792] EXT4-fs: Ignoring removed bh option [ 68.793202][ T4793] Bluetooth: MGMT ver 1.22 [ 68.820815][ T4792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.030453][ T4309] EXT4-fs (loop2): unmounting filesystem. [ 69.062666][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.076997][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.079636][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.286936][ T4818] loop2: detected capacity change from 0 to 2048 [ 69.345977][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.439385][ T4818] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.447010][ T4818] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 496 with error 28 [ 69.450763][ T4818] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.450763][ T4818] [ 69.453830][ T4818] EXT4-fs (loop2): Total free blocks count 0 [ 69.456582][ T4818] EXT4-fs (loop2): Free/Dirty block details [ 69.458473][ T4818] EXT4-fs (loop2): free_blocks=2415919104 [ 69.460235][ T4818] EXT4-fs (loop2): dirty_blocks=496 [ 69.461756][ T4818] EXT4-fs (loop2): Block reservation details [ 69.463635][ T4818] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 69.522639][ T4818] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 497 with error 28 [ 69.625294][ T22] cfg80211: failed to load regulatory.db [ 69.991343][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.002408][ T662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.175940][ T4855] loop2: detected capacity change from 0 to 256 [ 70.217030][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.222444][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.239096][ T4735] device veth0_vlan entered promiscuous mode [ 70.315495][ T4855] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 70.321729][ T4855] FAT-fs (loop2): Filesystem has been set read-only [ 70.345574][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.348203][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.352088][ T4735] device veth1_vlan entered promiscuous mode [ 70.504260][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 70.647724][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.651559][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.664437][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.677517][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.520227][ T4735] device veth0_macvtap entered promiscuous mode [ 71.532242][ T4735] device veth1_macvtap entered promiscuous mode [ 72.449508][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.468859][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.478619][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.492404][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.498450][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.507922][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.532371][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.541323][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.550498][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.556960][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.566477][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.580844][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.685994][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.696095][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.701004][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.703764][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.715166][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.718124][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.720720][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.723529][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.737673][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.740561][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.743119][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.747406][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.756036][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.817357][ T4903] loop2: detected capacity change from 0 to 256 [ 72.824774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.853151][ T4903] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 72.859479][ T4903] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 72.972174][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.976303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.983305][ T4735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.986869][ T4735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993278][ T4735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002722][ T4735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011140][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'. [ 73.085900][ T4486] device hsr_slave_0 left promiscuous mode [ 73.132928][ T4486] device hsr_slave_1 left promiscuous mode [ 73.141077][ T4916] loop1: detected capacity change from 0 to 512 [ 73.147696][ T4916] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 73.214937][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.217247][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.221255][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.223373][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.228547][ T4486] device bridge_slave_1 left promiscuous mode [ 73.231800][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.275879][ T4486] device bridge_slave_0 left promiscuous mode [ 73.277886][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.424620][ T4486] device veth1_macvtap left promiscuous mode [ 73.426705][ T4486] device veth0_macvtap left promiscuous mode [ 73.428457][ T4486] device veth1_vlan left promiscuous mode [ 73.430222][ T4486] device veth0_vlan left promiscuous mode [ 73.601059][ T4927] binder: 4926:4927 tried to acquire reference to desc 0, got 1 instead [ 73.605027][ T4927] binder: 4926:4927 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.608917][ T4927] binder: 4927 RLIMIT_NICE not set [ 73.610564][ T4927] binder: 4927 RLIMIT_NICE not set [ 73.612467][ T4341] binder: release 4926:4927 transaction 16 out, still active [ 73.616023][ T4341] binder: undelivered TRANSACTION_COMPLETE [ 73.633372][ T4347] binder: release 4926:4927 transaction 16 in, still active [ 73.635521][ T4347] binder: send failed reply for transaction 16, target dead [ 74.701547][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 74.710324][ T4937] binder: 4936:4937 tried to acquire reference to desc 0, got 1 instead [ 74.713301][ T4937] binder: 4936:4937 got transaction with invalid fd, -3 [ 74.715774][ T4937] binder: 4937:4936 translate fd array failed [ 74.717602][ T4937] binder: 4936:4937 transaction async to 4936:0 failed 21/29201/-9, size 96-24 line 3495 [ 74.721025][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.969361][ T4486] team0 (unregistering): Port device team_slave_1 removed [ 76.156062][ T4486] team0 (unregistering): Port device team_slave_0 removed [ 76.346107][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.646243][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.041698][ T4486] bond0 (unregistering): Released all slaves [ 79.407883][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.410239][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.413833][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.571549][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.573932][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.593643][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.365912][ T4948] sctp: failed to load transform for md5: -2 [ 80.568699][ T4347] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 80.587339][ T4347] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.599861][ T4973] binder: BINDER_SET_CONTEXT_MGR already set [ 80.609010][ T4973] binder: 4972:4973 ioctl 4018620d 20000040 returned -16 [ 80.623729][ T4973] binder: tried to use weak ref as strong ref [ 80.626336][ T4973] binder: 4972:4973 Acquire 1 refcount change on invalid ref 0 ret -22 [ 80.634738][ T4973] binder: 4972:4973 got transaction to invalid handle, 1 [ 80.636663][ T4973] binder: 4973:4972 cannot find target node [ 80.638251][ T4973] binder: 4972:4973 transaction call to 0:0 failed 24/29201/-22, size 0-0 line 3054 [ 80.669953][ T4722] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.779545][ T4983] loop4: detected capacity change from 0 to 1024 [ 80.879600][ T4976] fido_id[4976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.719766][ T5033] loop4: detected capacity change from 0 to 256 [ 83.824741][ T5033] FAT-fs (loop4): Directory bread(block 64) failed [ 83.826912][ T5033] FAT-fs (loop4): Directory bread(block 65) failed [ 83.828804][ T5033] FAT-fs (loop4): Directory bread(block 66) failed [ 83.830580][ T5033] FAT-fs (loop4): Directory bread(block 67) failed [ 83.880604][ T5033] FAT-fs (loop4): Directory bread(block 68) failed [ 83.882412][ T5033] FAT-fs (loop4): Directory bread(block 69) failed [ 83.914365][ T5033] FAT-fs (loop4): Directory bread(block 70) failed [ 83.924388][ T5033] FAT-fs (loop4): Directory bread(block 71) failed [ 83.926251][ T5033] FAT-fs (loop4): Directory bread(block 72) failed [ 83.932232][ T5033] FAT-fs (loop4): Directory bread(block 73) failed [ 84.287166][ T5050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.035007][ T5054] binder: BINDER_SET_CONTEXT_MGR already set [ 85.044373][ T5054] binder: 5052:5054 ioctl 4018620d 20000040 returned -16 [ 85.055112][ T5054] binder: tried to use weak ref as strong ref [ 85.056724][ T5054] binder: 5052:5054 Acquire 1 refcount change on invalid ref 0 ret -22 [ 85.068634][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 85.075840][ T5054] binder: 5052:5054 got transaction to invalid handle, 1 [ 85.077730][ T5054] binder: 5054:5052 cannot find target node [ 85.079289][ T5054] binder: 5052:5054 transaction async to 0:0 failed 27/29201/-22, size 0-0 line 3054 [ 85.101143][ T4341] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.122143][ T5057] loop5: detected capacity change from 0 to 2048 [ 85.182515][ T5057] Alternate GPT is invalid, using primary GPT. [ 85.185899][ T5057] loop5: p1 p2 p3 [ 86.368206][ T5081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.403494][ T4942] udevd[4942]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 86.406101][ T5081] loop4: detected capacity change from 0 to 1024 [ 86.429031][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 86.508143][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 86.535218][ T5081] JBD2: no valid journal superblock found [ 86.536858][ T5081] EXT4-fs (loop4): error loading journal [ 90.137348][ T4297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.141745][ T4297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.144948][ T4297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.283968][ T5124] netlink: del zone limit has 4 unknown bytes [ 91.374085][ C1] sched: RT throttling activated [ 91.724549][ T4297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.727102][ T4297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.729289][ T4297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.017442][ T5134] loop4: detected capacity change from 0 to 2048 [ 92.411993][ T5134] Alternate GPT is invalid, using primary GPT. [ 92.414005][ T5134] loop4: p1 p2 p3 [ 93.884309][ T4297] Bluetooth: hci5: command 0x0409 tx timeout [ 94.692444][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.716122][ T5161] lo speed is unknown, defaulting to 1000 [ 94.731940][ T5161] lo speed is unknown, defaulting to 1000 [ 94.751334][ T5161] lo speed is unknown, defaulting to 1000 [ 94.846171][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.873826][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.875637][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.913510][ T4942] udevd[4942]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.974865][ T5161] infiniband sz1: set down [ 94.979174][ T4341] lo speed is unknown, defaulting to 1000 [ 94.985525][ T5161] infiniband sz1: added lo [ 95.026831][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.110255][ T5161] RDS/IB: sz1: added [ 95.113209][ T5161] smc: adding ib device sz1 with port count 1 [ 95.116010][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.122341][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 95.130091][ T5161] smc: ib device sz1 port 1 has pnetid [ 95.156429][ T4341] lo speed is unknown, defaulting to 1000 [ 95.176014][ T5161] lo speed is unknown, defaulting to 1000 [ 95.259755][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.270682][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.283642][ T5117] device bridge_slave_0 entered promiscuous mode [ 95.313875][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.324226][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.326811][ T5117] device bridge_slave_1 entered promiscuous mode [ 95.397757][ T5195] overlayfs: failed to clone upperpath [ 95.424501][ T5161] lo speed is unknown, defaulting to 1000 [ 95.517743][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.542603][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.722779][ T5161] lo speed is unknown, defaulting to 1000 [ 96.293455][ T4297] Bluetooth: hci5: command 0x041b tx timeout [ 96.933842][ T5117] team0: Port device team_slave_0 added [ 96.968035][ T5117] team0: Port device team_slave_1 added [ 97.036235][ T5215] device ip6tnl1 entered promiscuous mode [ 97.062699][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.064910][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.101323][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.106881][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.108878][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.117001][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.220650][ T5117] device hsr_slave_0 entered promiscuous mode [ 97.492695][ T5117] device hsr_slave_1 entered promiscuous mode [ 98.400633][ T4297] Bluetooth: hci5: command 0x040f tx timeout [ 98.931397][ T5161] lo speed is unknown, defaulting to 1000 [ 99.120356][ T5161] lo speed is unknown, defaulting to 1000 [ 99.442526][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.445727][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.448381][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.452101][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.455182][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.457922][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.460616][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.463419][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.466122][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.469040][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 100.091700][ T5161] lo speed is unknown, defaulting to 1000 [ 100.434399][ T4297] Bluetooth: hci5: command 0x0419 tx timeout [ 100.919528][ T5269] loop1: detected capacity change from 0 to 4096 [ 100.942743][ T5269] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 100.972678][ T5269] ntfs3: loop1: Failed to load $Secure. [ 102.088650][ T5117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.099124][ T5280] binder: 5279:5280 tried to acquire reference to desc 0, got 1 instead [ 102.101697][ T5280] binder: 5279:5280 ioctl c0306201 200003c0 returned -14 [ 102.123501][ T5280] binder: 5279:5280 got transaction with invalid offsets ptr [ 102.148137][ T5280] binder: 5279:5280 transaction call to 5279:0 failed 32/29201/-22, size 4216-24 line 3585 [ 102.211589][ T4720] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.575501][ T5117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.084751][ T5117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.109709][ T5117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.184676][ T5271] loop5: detected capacity change from 0 to 32768 [ 103.271657][ T5271] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.218 (5271) [ 103.339570][ T5271] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.342527][ T5271] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 103.360812][ T5271] BTRFS info (device loop5): turning on flush-on-commit [ 103.362964][ T5271] BTRFS info (device loop5): doing ref verification [ 103.374331][ T5271] BTRFS info (device loop5): force clearing of disk cache [ 103.376493][ T5271] BTRFS info (device loop5): turning off barriers [ 103.833860][ T5271] BTRFS info (device loop5): enabling ssd optimizations [ 103.868788][ T5271] BTRFS info (device loop5): using spread ssd allocation scheme [ 104.089039][ T5271] BTRFS info (device loop5): setting nodatasum [ 104.090747][ T5271] BTRFS info (device loop5): using free space tree [ 104.289030][ T5319] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 104.300692][ T5271] BTRFS error (device loop5): open_ctree failed: -12 [ 104.331675][ T5324] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 104.383700][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.393326][ T4944] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4944) [ 104.412002][ T5331] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 105.483675][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.486268][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.490055][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.177484][ T5363] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.184878][ T5363] CIFS mount error: No usable UNC path provided in device string! [ 106.184878][ T5363] [ 106.187809][ T5363] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.791091][ T5365] process 'syz.2.232' launched './file2' with NULL argv: empty string added [ 108.823617][ T5393] loop4: detected capacity change from 0 to 128 [ 108.826069][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.829993][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.833476][ T4484] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.835506][ T4484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.879694][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.882640][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.892762][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.901555][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.903508][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.916179][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.936630][ T5393] syz.4.242: attempt to access beyond end of device [ 108.936630][ T5393] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 109.083209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.086317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.120801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.142354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.144720][ T5402] syz.4.242: attempt to access beyond end of device [ 109.144720][ T5402] loop4: rw=2049, sector=241, nr_sectors = 728 limit=128 [ 109.155470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.190620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.317966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.335894][ T5403] loop5: detected capacity change from 0 to 1024 [ 109.412081][ T5403] hfsplus: request for non-existent node 65536 in B*Tree [ 109.414341][ T5403] hfsplus: request for non-existent node 65536 in B*Tree [ 109.416578][ T5403] hfsplus: failed to load root directory [ 109.711201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.864787][ T27] audit: type=1326 audit(109.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.898004][ T27] audit: type=1326 audit(109.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.935478][ T27] audit: type=1326 audit(109.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.941232][ T27] audit: type=1326 audit(109.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.943946][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.964265][ T27] audit: type=1326 audit(109.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.970067][ T27] audit: type=1326 audit(109.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 109.985985][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.988787][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.015249][ T27] audit: type=1326 audit(109.840:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 110.021259][ T27] audit: type=1326 audit(109.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 110.044799][ T27] audit: type=1326 audit(109.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 110.063585][ T27] audit: type=1326 audit(109.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab55a8a8 code=0x7fc00000 [ 110.084354][ T5413] __nla_validate_parse: 44 callbacks suppressed [ 110.084366][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 110.106803][ T5393] syz.4.242: attempt to access beyond end of device [ 110.106803][ T5393] loop4: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 110.124673][ T5393] syz.4.242: attempt to access beyond end of device [ 110.124673][ T5393] loop4: rw=0, sector=241, nr_sectors = 8 limit=128 [ 110.128653][ T5393] syz.4.242: attempt to access beyond end of device [ 110.128653][ T5393] loop4: rw=0, sector=241, nr_sectors = 8 limit=128 [ 110.140482][ T55] device hsr_slave_0 left promiscuous mode [ 110.147448][ T5402] syz.4.242: attempt to access beyond end of device [ 110.147448][ T5402] loop4: rw=0, sector=241, nr_sectors = 1 limit=128 [ 110.163309][ T5391] syz.4.242: attempt to access beyond end of device [ 110.163309][ T5391] loop4: rw=0, sector=241, nr_sectors = 1 limit=128 [ 110.173027][ T5391] Buffer I/O error on dev loop4, logical block 241, async page read [ 110.183411][ T5391] syz.4.242: attempt to access beyond end of device [ 110.183411][ T5391] loop4: rw=0, sector=242, nr_sectors = 1 limit=128 [ 110.196551][ T5391] Buffer I/O error on dev loop4, logical block 242, async page read [ 110.202682][ T5391] syz.4.242: attempt to access beyond end of device [ 110.202682][ T5391] loop4: rw=0, sector=243, nr_sectors = 1 limit=128 [ 110.212089][ T5391] Buffer I/O error on dev loop4, logical block 243, async page read [ 110.219431][ T5391] syz.4.242: attempt to access beyond end of device [ 110.219431][ T5391] loop4: rw=0, sector=244, nr_sectors = 1 limit=128 [ 110.237298][ T5391] Buffer I/O error on dev loop4, logical block 244, async page read [ 110.239327][ T55] device hsr_slave_1 left promiscuous mode [ 110.246501][ T5391] Buffer I/O error on dev loop4, logical block 245, async page read [ 110.263080][ T5391] Buffer I/O error on dev loop4, logical block 246, async page read [ 110.271139][ T5391] Buffer I/O error on dev loop4, logical block 247, async page read [ 110.283899][ T5391] Buffer I/O error on dev loop4, logical block 248, async page read [ 110.292077][ T5393] Buffer I/O error on dev loop4, logical block 241, async page read [ 110.300726][ T5393] Buffer I/O error on dev loop4, logical block 242, async page read [ 110.320173][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.322304][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.329381][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.331501][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.344285][ T55] device bridge_slave_1 left promiscuous mode [ 110.354352][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.497491][ T55] device bridge_slave_0 left promiscuous mode [ 110.499537][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.674501][ T55] device veth1_macvtap left promiscuous mode [ 110.677123][ T55] device veth0_macvtap left promiscuous mode [ 110.679046][ T55] device veth1_vlan left promiscuous mode [ 110.689544][ T55] device veth0_vlan left promiscuous mode [ 110.732528][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 110.967978][ T5454] loop5: detected capacity change from 0 to 16 [ 111.006238][ T5454] erofs: (device loop5): mounted with root inode @ nid 36. [ 111.036213][ T5454] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 111.038884][ T5454] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 112.072936][ T5472] mmap: syz.5.256 (5472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.352195][ T5493] 9pnet_fd: Insufficient options for proto=fd [ 114.527345][ T55] team0 (unregistering): Port device team_slave_1 removed [ 114.709195][ T55] team0 (unregistering): Port device team_slave_0 removed [ 114.884999][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.084997][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.480918][ T55] bond0 (unregistering): Released all slaves [ 117.749910][ T5476] bridge0: port 3(vxlan0) entered blocking state [ 117.751661][ T5476] bridge0: port 3(vxlan0) entered disabled state [ 117.764398][ T5476] device vxlan0 entered promiscuous mode [ 117.771679][ T5501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.265'. [ 119.762232][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.778271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.780444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.819366][ T5526] device veth0 entered promiscuous mode [ 119.852490][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.271'. [ 120.225652][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.232574][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.451221][ T5557] fuse: Bad value for 'fd' [ 120.531893][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.535201][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.563617][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.574929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.578279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.589453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.599395][ T5117] device veth0_vlan entered promiscuous mode [ 120.611854][ T5117] device veth1_vlan entered promiscuous mode [ 120.662558][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.666622][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.669307][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.684732][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.689851][ T5117] device veth0_macvtap entered promiscuous mode [ 120.700674][ T5117] device veth1_macvtap entered promiscuous mode [ 120.719538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.722460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.809501][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.821061][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.830232][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.839344][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.850639][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.857819][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.866973][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.874627][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.882332][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.955981][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.959237][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.969721][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.983198][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.003180][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.023562][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.038450][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.051794][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.059998][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.064439][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.067210][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.069891][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.072887][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.091774][ T5117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.169518][ T5117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.198381][ T5117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.774982][ T5117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.811166][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.830800][ T5579] device batadv_slave_0 entered promiscuous mode [ 122.073125][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.120532][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.146350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.913674][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.980787][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.006658][ T1863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.524388][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.526271][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.524309][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.301'. [ 128.529427][ T5677] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.532059][ T5677] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.534558][ T5677] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.536941][ T5677] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.020314][ T5680] loop1: detected capacity change from 0 to 128 [ 129.114583][ T5680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.431099][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 129.456664][ T5705] netlink: 'syz.5.308': attribute type 5 has an invalid length. [ 131.530991][ T5731] netlink: 165 bytes leftover after parsing attributes in process `syz.1.314'. [ 137.621023][ T5807] vhci_hcd: invalid port number 96 [ 137.622561][ T5807] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 140.028709][ T5843] No such timeout policy "syz1" [ 141.728725][ T5855] binder: 5854:5855 tried to acquire reference to desc 0, got 1 instead [ 141.771464][ T5855] binder: 5854:5855 got reply transaction with bad transaction stack, transaction 37 has target 5854:0 [ 141.776475][ T5855] binder: 5854:5855 transaction reply to 0:0 failed 38/29201/-71, size 0-0 line 2970 [ 141.793379][ T4342] binder: release 5854:5855 transaction 37 out, still active [ 141.796752][ T4342] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.836774][ T4342] binder: send failed reply for transaction 37, target dead [ 143.745958][ T5888] loop6: detected capacity change from 0 to 1024 [ 143.793231][ T5888] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 143.807275][ T5888] hfsplus: failed to load root directory [ 143.846529][ T4297] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 143.849421][ T4297] CPU: 0 PID: 4297 Comm: kworker/u5:1 Not tainted 6.1.141-syzkaller #0 [ 143.851643][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.854361][ T4297] Workqueue: hci5 hci_rx_work [ 143.855664][ T4297] Call trace: [ 143.856525][ T4297] dump_backtrace+0x1c8/0x1f4 [ 143.857836][ T4297] show_stack+0x2c/0x3c [ 143.858924][ T4297] __dump_stack+0x30/0x40 [ 143.860068][ T4297] dump_stack_lvl+0xf8/0x160 [ 143.861282][ T4297] dump_stack+0x1c/0x5c [ 143.862430][ T4297] sysfs_create_dir_ns+0x22c/0x24c [ 143.863852][ T4297] kobject_add_internal+0x5a8/0xb30 [ 143.865390][ T4297] kobject_add+0x134/0x1f8 [ 143.866613][ T4297] device_add+0x3f0/0xf94 [ 143.867702][ T4297] hci_conn_add_sysfs+0xbc/0x1cc [ 143.868907][ T4297] le_conn_complete_evt+0xa24/0xf8c [ 143.870185][ T4297] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 143.871784][ T4297] hci_le_meta_evt+0x2c0/0x4a4 [ 143.873160][ T4297] hci_event_packet+0x6ac/0xf08 [ 143.874482][ T4297] hci_rx_work+0x324/0xaa0 [ 143.875709][ T4297] process_one_work+0x7f4/0x13a8 [ 143.877022][ T4297] worker_thread+0x8c8/0xfbc [ 143.878238][ T4297] kthread+0x250/0x2d8 [ 143.879321][ T4297] ret_from_fork+0x10/0x20 [ 143.880845][ T4297] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.884491][ T4297] Bluetooth: hci5: failed to register connection device [ 143.993187][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 146.041519][ T5923] netlink: 'syz.5.369': attribute type 10 has an invalid length. [ 146.190318][ T5931] loop1: detected capacity change from 0 to 1024 [ 147.011231][ T5920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.053406][ T5923] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.272905][ T5968] loop4: detected capacity change from 0 to 256 [ 149.360978][ T5968] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.364117][ T5968] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 149.413826][ T5968] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 149.905708][ T39] hfsplus: b-tree write err: -5, ino 4 [ 151.239566][ T5991] loop6: detected capacity change from 0 to 1024 [ 151.781384][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.389'. [ 153.285480][ T6015] loop1: detected capacity change from 0 to 8 [ 153.472690][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.485880][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.644489][ T6046] syz.4.396 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.660214][ T6046] loop4: detected capacity change from 0 to 1024 [ 155.396340][ T4297] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 155.400954][ T4297] Bluetooth: hci5: Injecting HCI hardware error event [ 155.410973][ T47] Bluetooth: hci5: hardware error 0x00 [ 155.677033][ T6066] syz.1.405 sent an empty control message without MSG_MORE. [ 156.979087][ T6098] siw: device registration error -23 [ 157.819402][ T6103] loop4: detected capacity change from 0 to 512 [ 157.834624][ T6103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.836700][ T6103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.869153][ T47] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 158.993869][ T6103] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.284425][ T6130] loop6: detected capacity change from 0 to 16 [ 159.289723][ T6130] erofs: (device loop6): mounted with root inode @ nid 36. [ 159.300937][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 159.842668][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 159.845636][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 159.848888][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 159.853724][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 159.856773][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 159.859731][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 159.863115][ T6135] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 159.865750][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 159.868280][ T6135] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 159.870973][ T6135] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 159.875641][ T6135] bio_check_eod: 2855 callbacks suppressed [ 159.875694][ T6135] syz.6.424: attempt to access beyond end of device [ 159.875694][ T6135] loop6: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 159.882096][ T6135] syz.6.424: attempt to access beyond end of device [ 159.882096][ T6135] loop6: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 159.886782][ T6135] syz.6.424: attempt to access beyond end of device [ 159.886782][ T6135] loop6: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 159.891454][ T6135] syz.6.424: attempt to access beyond end of device [ 159.891454][ T6135] loop6: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 159.895717][ T6135] syz.6.424: attempt to access beyond end of device [ 159.895717][ T6135] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 159.899907][ T6135] syz.6.424: attempt to access beyond end of device [ 159.899907][ T6135] loop6: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 159.905393][ T6135] syz.6.424: attempt to access beyond end of device [ 159.905393][ T6135] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 159.910563][ T6135] syz.6.424: attempt to access beyond end of device [ 159.910563][ T6135] loop6: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 161.852066][ T6158] loop4: detected capacity change from 0 to 512 [ 161.910214][ T6158] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 161.930456][ T6158] EXT4-fs (loop4): 1 truncate cleaned up [ 161.932132][ T6158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.014875][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.433'. [ 163.019739][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 163.319634][ T6241] dccp_close: ABORT with 64 bytes unread [ 163.929106][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 165.924584][ T6286] loop1: detected capacity change from 0 to 2048 [ 166.057151][ T6301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.096185][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.6.448'. [ 167.233160][ T6308] loop4: detected capacity change from 0 to 8192 [ 167.276544][ T6308] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.301358][ T6330] capability: warning: `syz.2.450' uses deprecated v2 capabilities in a way that may be insecure [ 167.316291][ T6308] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 167.320350][ T6308] REISERFS (device loop4): using ordered data mode [ 167.322288][ T6308] reiserfs: using flush barriers [ 167.515492][ T6308] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.597070][ T6308] REISERFS (device loop4): checking transaction log (loop4) [ 168.003866][ T6335] loop6: detected capacity change from 0 to 1024 [ 168.009007][ T6335] EXT4-fs: Ignoring removed nobh option [ 168.010660][ T6335] EXT4-fs: Ignoring removed bh option [ 168.016412][ T6308] REISERFS (device loop4): Using r5 hash to sort names [ 168.016951][ T6335] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.028780][ T6308] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 168.051407][ T6335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.442486][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 169.127640][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 169.149674][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.454'. [ 169.152634][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 169.158370][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.454'. [ 170.230796][ T6363] device batadv0 entered promiscuous mode [ 170.244431][ T6363] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 170.248264][ T6363] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 171.449038][ T6389] loop6: detected capacity change from 0 to 164 [ 171.621494][ T6397] loop4: detected capacity change from 0 to 512 [ 171.665372][ T6397] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.849719][ T6399] loop1: detected capacity change from 0 to 8192 [ 172.580817][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.582967][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.290135][ T6389] rock: directory entry would overflow storage [ 173.292238][ T6389] rock: sig=0x5053, size=7, remaining=4 [ 173.387017][ T6389] isofs_fill_super: root inode is not a directory. Corrupted media? [ 173.451991][ T6397] EXT4-fs (loop4): 1 orphan inode deleted [ 173.453674][ T6397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.870168][ T5989] __quota_error: 58 callbacks suppressed [ 174.870184][ T5989] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 174.875407][ T5989] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:15: Failed to release dquot type 1 [ 176.312701][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 176.462577][ T6425] device batadv0 entered promiscuous mode [ 176.462820][ T6425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.463768][ T6425] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 176.470996][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.471'. [ 177.481865][ T6439] fuse: Unknown parameter 'fd18446744073709551615' [ 177.802829][ T6448] loop6: detected capacity change from 0 to 8192 [ 179.096154][ T6448] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.099819][ T6448] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 179.102450][ T6448] REISERFS (device loop6): using ordered data mode [ 179.114271][ T6448] reiserfs: using flush barriers [ 179.116395][ T6448] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.131301][ T6448] REISERFS (device loop6): checking transaction log (loop6) [ 179.153464][ T6448] REISERFS (device loop6): Using r5 hash to sort names [ 179.155905][ T6448] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 180.655185][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 181.346591][ T6479] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 181.418492][ T6499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.462995][ T6502] fuse: Bad value for 'fd' [ 181.472516][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.5.490'. [ 181.634002][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.489'. [ 181.663237][ T6512] tmpfs: Unknown parameter 'nolazytime˙˙' [ 181.816321][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.492'. [ 183.315182][ T6526] loop6: detected capacity change from 0 to 8 [ 183.363766][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.368503][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.398264][ T6526] SQUASHFS error: Unable to read directory block [629:2b] [ 185.484583][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 185.490541][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 185.543120][ T6551] loop6: detected capacity change from 0 to 2048 [ 186.864692][ T6551] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 187.722324][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.724170][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.857423][ T6582] fuse: Bad value for 'fd' [ 187.957236][ T6551] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.041697][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 188.053223][ T6551] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 196 with error 28 [ 188.080035][ T6551] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.080035][ T6551] [ 188.122047][ T6551] EXT4-fs (loop6): Total free blocks count 0 [ 188.138222][ T6585] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 197 with error 28 [ 188.219066][ T6551] EXT4-fs (loop6): Free/Dirty block details [ 188.220868][ T6551] EXT4-fs (loop6): free_blocks=2415919104 [ 188.222454][ T6551] EXT4-fs (loop6): dirty_blocks=416 [ 188.223904][ T6551] EXT4-fs (loop6): Block reservation details [ 188.290020][ T6585] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.290020][ T6585] [ 189.867897][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 189.870626][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 190.083844][ T6602] netlink: 'syz.5.513': attribute type 3 has an invalid length. [ 190.158181][ T6602] netlink: 'syz.5.513': attribute type 3 has an invalid length. [ 191.475446][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.526'. [ 191.478028][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.526'. [ 191.623370][ T6655] tipc: Enabling of bearer rejected, failed to enable media [ 192.653301][ T6671] loop1: detected capacity change from 0 to 1024 [ 192.687669][ T6671] EXT4-fs: inline encryption not supported [ 192.689260][ T6671] EXT4-fs: Ignoring removed bh option [ 192.787987][ T6671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.814565][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 192.942438][ T6652] loop6: detected capacity change from 0 to 32768 [ 193.117155][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 193.281335][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.322768][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.374930][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.412551][ T6703] loop6: detected capacity change from 0 to 1024 [ 193.541892][ T6703] JBD2: no valid journal superblock found [ 193.548597][ T6703] EXT4-fs (loop6): error loading journal [ 201.286874][ T6802] netlink: 96 bytes leftover after parsing attributes in process `syz.2.562'. [ 203.163439][ T6831] tipc: Failed to remove unknown binding: 66,1,1/0:3515345492/3515345494 [ 203.191537][ T6831] tipc: Failed to remove unknown binding: 66,1,1/0:3515345492/3515345494 [ 203.202336][ T6831] tipc: Failed to remove unknown binding: 66,1,1/0:3515345492/3515345494 [ 207.870448][ T6875] sctp: failed to load transform for md5: -2 [ 207.887479][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.890113][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.892738][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.895452][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.898157][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.900822][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.903521][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.906158][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.908722][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.911366][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 213.321889][ T6941] device ip6tnl1 entered promiscuous mode [ 217.674646][ T7011] loop6: detected capacity change from 0 to 1024 [ 217.854254][ T7011] hfsplus: request for non-existent node 65536 in B*Tree [ 217.856401][ T7011] hfsplus: request for non-existent node 65536 in B*Tree [ 217.859724][ T7011] hfsplus: failed to load root directory [ 218.427893][ T7017] loop1: detected capacity change from 0 to 256 [ 218.434896][ T7017] exfat: Deprecated parameter 'namecase' [ 218.436471][ T7017] exfat: Deprecated parameter 'codepage' [ 218.438045][ T7017] exfat: Bad value for 'codepage' [ 218.560650][ T7024] loop1: detected capacity change from 0 to 1024 [ 218.576206][ T7024] EXT4-fs: Ignoring removed nobh option [ 218.579573][ T7024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.188721][ T7024] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 220.002774][ T7024] loop1: detected capacity change from 0 to 1024 [ 220.005211][ T7024] EXT4-fs: Ignoring removed orlov option [ 220.049021][ T7024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 220.127880][ T7041] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 220.191073][ T7045] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 220.345807][ T4305] EXT4-fs (loop1): unmounting filesystem. [ 220.516343][ T7061] __nla_validate_parse: 43 callbacks suppressed [ 220.516356][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 220.738009][ T7074] loop6: detected capacity change from 0 to 512 [ 220.741826][ T7074] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.760265][ T7074] EXT4-fs (loop6): 1 truncate cleaned up [ 220.768709][ T7074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 220.782207][ T27] audit: type=1326 audit(220.750:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 220.928048][ T27] audit: type=1326 audit(220.750:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.135172][ T27] audit: type=1326 audit(220.750:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.445692][ T27] audit: type=1326 audit(220.750:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.451990][ T27] audit: type=1326 audit(220.750:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.458118][ T27] audit: type=1326 audit(220.750:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.494160][ T27] audit: type=1326 audit(220.750:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.516253][ T27] audit: type=1326 audit(220.750:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.546247][ T27] audit: type=1326 audit(220.750:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 221.610219][ T27] audit: type=1326 audit(220.750:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715a8a8 code=0x7fc00000 [ 222.153314][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 222.532831][ T7096] loop6: detected capacity change from 0 to 256 [ 222.759858][ T7096] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 222.772619][ T7096] FAT-fs (loop6): Filesystem has been set read-only [ 223.631878][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 225.785045][ T7141] lo speed is unknown, defaulting to 1000 [ 225.788240][ T7141] lo speed is unknown, defaulting to 1000 [ 225.790000][ T7141] lo speed is unknown, defaulting to 1000 [ 226.002373][ T7141] infiniband sz1: set active [ 226.003880][ T4343] lo speed is unknown, defaulting to 1000 [ 226.035897][ T7152] loop6: detected capacity change from 0 to 16 [ 226.051291][ T7141] infiniband sz1: added lo [ 226.052916][ T7152] erofs: (device loop6): mounted with root inode @ nid 36. [ 226.081833][ T7152] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 226.107744][ T7152] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 226.110456][ T7152] syz.6.637: attempt to access beyond end of device [ 226.110456][ T7152] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 226.111673][ T7141] RDS/IB: sz1: added [ 226.117013][ T7152] syz.6.637: attempt to access beyond end of device [ 226.117013][ T7152] loop6: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 226.121147][ T7152] syz.6.637: attempt to access beyond end of device [ 226.121147][ T7152] loop6: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 226.130063][ T7141] smc: adding ib device sz1 with port count 1 [ 226.131948][ T7141] smc: ib device sz1 port 1 has pnetid [ 226.133688][ T3764] lo speed is unknown, defaulting to 1000 [ 226.136293][ T7141] lo speed is unknown, defaulting to 1000 [ 226.170044][ T7141] lo speed is unknown, defaulting to 1000 [ 226.204428][ T7141] lo speed is unknown, defaulting to 1000 [ 226.452048][ T7166] loop1: detected capacity change from 0 to 1024 [ 226.558895][ T7166] hfsplus: request for non-existent node 65536 in B*Tree [ 226.560924][ T7166] hfsplus: request for non-existent node 65536 in B*Tree [ 226.563224][ T7166] hfsplus: failed to load root directory [ 227.089677][ T7141] lo speed is unknown, defaulting to 1000 [ 227.184059][ T7141] lo speed is unknown, defaulting to 1000 [ 227.223666][ T7170] device veth0 entered promiscuous mode [ 227.245282][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 228.332268][ T7191] loop1: detected capacity change from 0 to 256 [ 228.606377][ T7191] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 228.613505][ T7191] FAT-fs (loop1): Filesystem has been set read-only [ 235.562783][ T7295] netlink: 165 bytes leftover after parsing attributes in process `syz.4.664'. [ 237.868911][ T7313] device veth0 entered promiscuous mode [ 238.820910][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.671'. [ 240.464330][ T7339] rdma_rxe: rxe_register_device failed with error -23 [ 240.466670][ T7339] rdma_rxe: failed to add lo [ 243.910745][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 243.925323][ T7372] Unable to handle kernel paging request at virtual address dfff800000000068 [ 243.928052][ T7372] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 243.930437][ T7372] Mem abort info: [ 243.931461][ T7372] ESR = 0x0000000096000006 [ 243.932645][ T7372] EC = 0x25: DABT (current EL), IL = 32 bits [ 243.934393][ T7372] SET = 0, FnV = 0 [ 243.935384][ T7372] EA = 0, S1PTW = 0 [ 243.936427][ T7372] FSC = 0x06: level 2 translation fault [ 243.937909][ T7372] Data abort info: [ 243.938861][ T7372] ISV = 0, ISS = 0x00000006 [ 243.940050][ T7372] CM = 0, WnR = 0 [ 243.941031][ T7372] [dfff800000000068] address between user and kernel address ranges [ 243.943381][ T7372] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 243.945278][ T7372] Modules linked in: [ 243.946301][ T7372] CPU: 0 PID: 7372 Comm: syz.4.688 Not tainted 6.1.141-syzkaller #0 [ 243.948401][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.951133][ T7372] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 243.953204][ T7372] pc : find_match+0xa0/0xb0c [ 243.954457][ T7372] lr : find_match+0x74/0xb0c [ 243.955668][ T7372] sp : ffff800020ea6020 [ 243.956780][ T7372] x29: ffff800020ea6040 x28: 1fffe00018628984 x27: dfff800000000000 [ 243.958920][ T7372] x26: 0000000000000340 x25: ffff0000c3144c37 x24: 0000000000000201 [ 243.961047][ T7372] x23: 0000000000000002 x22: ffff0000c3144c20 x21: 0000000000000000 [ 243.963167][ T7372] x20: 1fffe00018628986 x19: 0000000000000000 x18: 0000000000000000 [ 243.965332][ T7372] x17: 000000000040004e x16: ffff8000082d0750 x15: 0000000000000002 [ 243.967460][ T7372] x14: 000000000000c0fe x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 243.969599][ T7372] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000ca000000 [ 243.971742][ T7372] x8 : 0000000000000068 x7 : ffff800020ea63d0 x6 : 0000000000000002 [ 243.973869][ T7372] x5 : ffff800020ea63d0 x4 : ffff800020ea63c0 x3 : 0000000000000002 [ 243.976048][ T7372] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 243.978195][ T7372] Call trace: [ 243.979040][ T7372] find_match+0xa0/0xb0c [ 243.980175][ T7372] rt6_nh_find_match+0xcc/0x138 [ 243.981488][ T7372] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 243.982963][ T7372] __find_rr_leaf+0x3b8/0x5c8 [ 243.984211][ T7372] fib6_table_lookup+0x308/0x8b8 [ 243.985529][ T7372] ip6_pol_route+0x1f4/0x1024 [ 243.986763][ T7372] ip6_pol_route_output+0x60/0x94 [ 243.988096][ T7372] fib6_rule_lookup+0x258/0x4a8 [ 243.989388][ T7372] ip6_route_output_flags_noref+0x250/0x314 [ 243.990982][ T7372] ip6_route_output_flags+0xe4/0x368 [ 243.992356][ T7372] ip6_dst_lookup_tail+0x274/0x12c0 [ 243.993780][ T7372] ip6_dst_lookup_flow+0x54/0xe0 [ 243.995067][ T7372] inet6_csk_route_req+0x418/0x60c [ 243.996438][ T7372] tcp_v6_route_req+0x2a8/0x3dc [ 243.997739][ T7372] tcp_conn_request+0xa48/0x247c [ 243.999067][ T7372] tcp_v6_conn_request+0x264/0x380 [ 244.000427][ T7372] tcp_rcv_state_process+0x11d4/0x380c [ 244.001912][ T7372] tcp_v6_do_rcv+0x868/0x1128 [ 244.003130][ T7372] tcp_v6_rcv+0x1978/0x1fa0 [ 244.004291][ T7372] ip6_protocol_deliver_rcu+0x928/0x11d0 [ 244.005794][ T7372] ip6_input_finish+0x164/0x298 [ 244.007085][ T7372] NF_HOOK+0x2c4/0x358 [ 244.008180][ T7372] ip6_input+0x90/0xa8 [ 244.009322][ T7372] ip6_rcv_finish+0x1f4/0x220 [ 244.010628][ T7372] NF_HOOK+0x2c4/0x358 [ 244.011719][ T7372] ipv6_rcv+0x9c/0xbc [ 244.012856][ T7372] __netif_receive_skb+0xcc/0x2ac [ 244.014243][ T7372] netif_receive_skb+0x1e8/0x8f0 [ 244.015596][ T7372] tun_rx_batched+0x478/0x5b4 [ 244.016944][ T7372] tun_get_user+0x1fa0/0x3240 [ 244.018250][ T7372] tun_chr_write_iter+0xfc/0x204 [ 244.019618][ T7372] vfs_write+0x5ac/0x7c4 [ 244.020814][ T7372] ksys_write+0x120/0x210 [ 244.022012][ T7372] __arm64_sys_write+0x7c/0x90 [ 244.023304][ T7372] invoke_syscall+0x98/0x2bc [ 244.024557][ T7372] el0_svc_common+0x138/0x258 [ 244.025833][ T7372] do_el0_svc+0x58/0x13c [ 244.026994][ T7372] el0_svc+0x58/0x138 [ 244.028066][ T7372] el0t_64_sync_handler+0x84/0xf0 [ 244.029439][ T7372] el0t_64_sync+0x18c/0x190 [ 244.030664][ T7372] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 244.032541][ T7372] ---[ end trace 0000000000000000 ]--- [ 244.515266][ T7372] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 244.517443][ T7372] SMP: stopping secondary CPUs [ 244.518820][ T7372] Kernel Offset: disabled [ 244.520016][ T7372] CPU features: 0x080000,02070084,26017203 [ 244.521586][ T7372] Memory Limit: none [ 244.997038][ T7372] Rebooting in 86400 seconds..