last executing test programs: 10m14.1694605s ago: executing program 3 (id=551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 10m13.927938049s ago: executing program 3 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(r1, 0x0) 10m13.806536998s ago: executing program 3 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 10m13.646978498s ago: executing program 3 (id=557): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24040000) unshare(0x2c020400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x11) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x400, 0x0, 0x0, 0xa0}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {0x0, 0x24000000}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006191240000000000950000008c2db237"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 10m13.423065696s ago: executing program 3 (id=558): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000180)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000220000000400000006"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, 0x0, &(0x7f0000000000)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 10m12.758196223s ago: executing program 3 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 10m12.625461482s ago: executing program 32 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 6m22.531829331s ago: executing program 5 (id=2258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mq_unlink(0x0) 6m21.558938656s ago: executing program 5 (id=2260): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) inotify_add_watch(r3, &(0x7f00000002c0)='./file1\x00', 0x4000080) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$get_security(0x11, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m19.198708713s ago: executing program 5 (id=2267): r0 = io_uring_setup(0x5b77, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000, 0x137}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000340), 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)) 6m18.997874372s ago: executing program 5 (id=2270): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 6m17.283949003s ago: executing program 5 (id=2274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000a0000000500010006"], 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030609020000000000000000000000000500010007"], 0x1c}}, 0x0) 6m17.016529492s ago: executing program 5 (id=2277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m1.913982911s ago: executing program 33 (id=2277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m40.25329897s ago: executing program 0 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpriority(0x2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x535d, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_io_uring_setup(0x36c1, &(0x7f0000000740)={0x0, 0x0, 0x400, 0x0, 0x1}, &(0x7f0000000140), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m39.965333559s ago: executing program 1 (id=3090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 2m39.494506587s ago: executing program 1 (id=3092): syz_emit_ethernet(0x58, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000223aff00000000000000000000ffffac141400fe80000081a8"], 0x0) socket$inet(0x2, 0x3, 0x100) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x7fffffffffffffff}, 0x18) 2m38.760733583s ago: executing program 0 (id=3094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) pipe2$9p(0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 2m37.727318007s ago: executing program 0 (id=3095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2m37.693367967s ago: executing program 1 (id=3096): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m37.575301246s ago: executing program 1 (id=3098): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 2m37.436962456s ago: executing program 0 (id=3099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1400, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0xffffffffffffffff) write(r5, &(0x7f0000000800)="240000001e005f0314200000000000000000000001000000000008", 0x1b) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() keyctl$invalidate(0x15, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m36.286655109s ago: executing program 1 (id=3100): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'veth1_macvtap\x00', {'bond_slave_0\x00'}, 0x4}) 2m36.000674648s ago: executing program 0 (id=3101): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 2m35.948299107s ago: executing program 1 (id=3102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 2m35.855299097s ago: executing program 0 (id=3103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000100)="3769b1010037e8a9ae43aeb3b548", 0xe}], 0x2) 2m20.566718886s ago: executing program 34 (id=3103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000100)="3769b1010037e8a9ae43aeb3b548", 0xe}], 0x2) 2m20.394002725s ago: executing program 35 (id=3102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 1m52.624358887s ago: executing program 6 (id=3157): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1m46.329834574s ago: executing program 6 (id=3162): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m46.272187483s ago: executing program 6 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x124}, 0x1, 0x0, 0x0, 0x44080}, 0x81) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0004, 0x0, 0x8, &(0x7f0000001a40), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) readahead(r7, 0xdbfc, 0xffffffffffffff91) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1m44.576675865s ago: executing program 6 (id=3166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0xfffffffffffffec5, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x1, 0x200, 0x0, 0xfe, 0x4a, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fe3f1400e27f000001"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r9, &(0x7f0000000180), 0x0}, 0x20) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000380)='logon\x00', &(0x7f00000003c0)='\xa2/+]\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1m42.711403104s ago: executing program 6 (id=3168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x64000600) 1m41.174666837s ago: executing program 6 (id=3169): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2140002, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000003c0), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 1m25.161341452s ago: executing program 36 (id=3169): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2140002, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000003c0), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 36.898691036s ago: executing program 4 (id=3389): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0xd8, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 36.838274995s ago: executing program 7 (id=3390): open(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004004) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x20000050) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0) 36.637258654s ago: executing program 4 (id=3391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 36.613819954s ago: executing program 7 (id=3392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) 36.353147553s ago: executing program 7 (id=3394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd", 0x16}, {&(0x7f0000000a00)="9c74dfbf7757286cc809ff8654a11f0991d60050", 0x14}], 0x2) 36.067910121s ago: executing program 9 (id=3397): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 35.297819697s ago: executing program 8 (id=3398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 35.150747406s ago: executing program 8 (id=3399): syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@random="cb88547571de", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x2, "122b472f41e24b11f24b608816e5"}]}}}}}}, 0x0) 35.143844476s ago: executing program 8 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe7a, &(0x7f0000000000)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50280}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x4000000) 34.296393421s ago: executing program 9 (id=3401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x0) 34.133252961s ago: executing program 9 (id=3402): open(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004004) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x20000050) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b8000000140001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0) 34.04455759s ago: executing program 9 (id=3403): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000240)="072e756dc797302f67497e9929e30a5102b07643f1182d7372077b7ddf6fa794f0b4f7230c8c6eef1a98da1a62b24005eb78ec72cbc7f79aecb4d47b77e2b8b0d58fcd34b48b131d34afa9f22a0f006084d780f7de69", 0x56}], 0x2}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x200000) 33.092781435s ago: executing program 2 (id=3404): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 33.009358085s ago: executing program 2 (id=3405): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) close(r1) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10002) 33.009163665s ago: executing program 2 (id=3406): socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)='\b', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) close(0x5) 32.963408144s ago: executing program 2 (id=3407): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 23.250195753s ago: executing program 4 (id=3408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4) 22.994120192s ago: executing program 8 (id=3409): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r1, 0x8}, 0x8) 22.993946011s ago: executing program 9 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 22.882540401s ago: executing program 4 (id=3411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000002c0)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, 0x0, 0x0) 22.840000151s ago: executing program 8 (id=3412): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000540), 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 22.638408049s ago: executing program 4 (id=3413): open(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004004) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x20000050) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b8000000140001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0) 22.073422666s ago: executing program 9 (id=3414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 21.637669644s ago: executing program 7 (id=3415): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x40, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x40}}, 0x8000) 21.510155763s ago: executing program 7 (id=3416): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$get_security(0x11, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 21.093603512s ago: executing program 4 (id=3417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xbc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20.324065827s ago: executing program 8 (id=3418): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/1069], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 19.841719615s ago: executing program 2 (id=3419): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) 19.689838904s ago: executing program 2 (id=3420): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x74}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.09707845s ago: executing program 7 (id=3421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6.493350794s ago: executing program 37 (id=3414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 5.533643679s ago: executing program 38 (id=3417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xbc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.976555276s ago: executing program 39 (id=3418): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/1069], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.474524873s ago: executing program 40 (id=3420): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x74}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 41 (id=3421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) kernel console output (not intermixed with test programs): 078] loop1: detected capacity change from 0 to 512 [ 465.332622][T13078] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.350162][T13078] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 465.360323][T13078] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2938: inode #15: comm syz.1.2938: iget: illegal inode # [ 465.370464][T13078] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2938: couldn't read orphan inode 15 (err -117) [ 465.391272][T13078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 465.441736][T13078] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.2938: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 465.510616][ T4587] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.514334][ T27] audit: type=1326 audit(262864.471:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.2938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 465.524806][ T27] audit: type=1326 audit(262864.491:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.2938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 465.555323][ T27] audit: type=1326 audit(262864.491:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.2938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 465.565639][ T27] audit: type=1326 audit(262864.491:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.2938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 465.574030][T13036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.590352][T13036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.704915][ T4587] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.735763][T13036] team0: Port device team_slave_0 added [ 465.738971][T13036] team0: Port device team_slave_1 added [ 465.757913][T13036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.759550][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.765030][T13036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.769875][T13036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.771562][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.777796][T13036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.024465][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.028443][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.561815][T13036] device hsr_slave_0 entered promiscuous mode [ 466.572137][T12502] EXT4-fs (loop1): unmounting filesystem. [ 466.615781][T13036] device hsr_slave_1 entered promiscuous mode [ 466.636626][T13036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.638221][T13036] Cannot create hsr debugfs directory [ 466.651347][ T4587] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.713366][ T4587] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.167199][ T4296] Bluetooth: hci0: command 0x040f tx timeout [ 469.080537][T13120] tipc: Failed to remove unknown binding: 66,1,1/0:2727696538/2727696540 [ 469.082798][T13120] tipc: Failed to remove unknown binding: 66,1,1/0:2727696538/2727696540 [ 469.232475][ T4296] Bluetooth: hci0: command 0x0419 tx timeout [ 469.701708][T13119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.703343][T13119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 469.704998][T13119] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 469.706778][T13119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.708080][T13119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 469.709292][T13119] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 469.710899][T13119] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 469.712195][T13119] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 469.713502][T13119] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 469.715088][T13119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.716396][T13119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 469.717798][T13119] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 469.719452][T13119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.721729][T13119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 469.722987][T13119] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 469.987456][T13129] loop4: detected capacity change from 0 to 16 [ 470.172095][T13129] erofs: (device loop4): mounted with root inode @ nid 36. [ 470.211639][T13129] syz.4.2949: attempt to access beyond end of device [ 470.211639][T13129] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 470.596607][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.598602][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.678243][T13131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.680614][T13131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.701872][T13135] loop4: detected capacity change from 0 to 128 [ 470.735464][T13131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.911680][T13139] loop4: detected capacity change from 0 to 512 [ 470.927720][T13139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.960386][T13139] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 470.973951][T13139] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2952: inode #15: comm syz.4.2952: iget: illegal inode # [ 470.980746][T13139] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2952: couldn't read orphan inode 15 (err -117) [ 470.987338][T13139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 471.812293][ T4312] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.813718][ T4312] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.815358][ T4312] Bluetooth: hci5: command 0x0c1a tx timeout [ 471.816689][ T4312] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.817972][ T4312] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.840509][T13139] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.2952: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 471.869141][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 471.869154][ T27] audit: type=1326 audit(262870.831:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 471.906475][ T27] audit: type=1326 audit(262870.871:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 471.919585][ T27] audit: type=1326 audit(262870.871:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 471.965403][ T27] audit: type=1326 audit(262870.871:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 471.970541][ T27] audit: type=1326 audit(262870.871:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.005047][ T27] audit: type=1326 audit(262870.881:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=197 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.045576][ T27] audit: type=1326 audit(262870.881:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.066225][ T27] audit: type=1326 audit(262870.881:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.071128][ T27] audit: type=1326 audit(262870.911:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.110367][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 472.111889][ T27] audit: type=1326 audit(262870.911:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13138 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffba759a28 code=0x7ffc0000 [ 472.207617][ T4587] device erspan0 left promiscuous mode [ 472.290243][T13036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.327059][T13036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.519454][T13036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.561829][T13036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.495515][T13172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.496795][T13172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 473.499513][T13172] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 473.501054][T13172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.502236][T13172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 473.503511][T13172] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 473.505065][T13172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 473.506609][T13172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 473.508666][T13172] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 473.510269][T13172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.511534][T13172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 473.512815][T13172] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 473.514327][T13172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.516093][T13172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 473.517328][T13172] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 473.683692][T13036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.788360][T13036] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.808252][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.810417][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.836090][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.842118][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.854575][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.856300][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.898932][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.928111][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.934005][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.959688][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.961280][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.968370][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.974897][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.114721][T13183] tipc: Started in network mode [ 475.115948][T13183] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 475.119470][T13183] tipc: Enabled bearer , priority 10 [ 475.121568][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.129422][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.151056][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.153684][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.381820][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.496099][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.545745][ T4312] Bluetooth: hci0: command 0x0c1a tx timeout [ 475.548943][ T4312] Bluetooth: hci5: command 0x0c1a tx timeout [ 475.550705][ T4312] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.552855][ T4296] Bluetooth: hci4: command 0x0c1a tx timeout [ 475.552919][ T4312] Bluetooth: hci1: command 0x0c1a tx timeout [ 476.007043][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.050575][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.053099][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.123472][T10722] EXT4-fs (loop6): unmounting filesystem. [ 476.187374][T13036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.255275][ T4346] tipc: Node number set to 4269801488 [ 477.013532][ T4587] device batadv_slave_1 left promiscuous mode [ 477.228549][ T4587] device hsr_slave_0 left promiscuous mode [ 477.297653][ T4587] device hsr_slave_1 left promiscuous mode [ 478.127001][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 478.127096][T13192] Bluetooth: hci4: command 0x0406 tx timeout [ 478.127268][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 478.127453][T13192] Bluetooth: hci5: command 0x0406 tx timeout [ 478.127572][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 478.155550][ T4587] device bridge_slave_1 left promiscuous mode [ 478.155681][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.326812][ T4587] device bridge_slave_0 left promiscuous mode [ 478.326926][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.589031][ T4587] device veth1_macvtap left promiscuous mode [ 478.590366][ T4587] device veth0_macvtap left promiscuous mode [ 478.591724][ T4587] device veth1_vlan left promiscuous mode [ 478.593297][ T4587] device veth0_vlan left promiscuous mode [ 479.375279][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 479.375295][ T27] audit: type=1326 audit(262877.671:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.387845][ T27] audit: type=1326 audit(262877.671:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.400207][ T27] audit: type=1326 audit(262877.681:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=159 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.412509][ T27] audit: type=1326 audit(262877.681:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.424469][ T27] audit: type=1326 audit(262877.681:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.470143][ T27] audit: type=1326 audit(262877.691:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.474771][ T27] audit: type=1326 audit(262877.691:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.518994][ T27] audit: type=1326 audit(262877.691:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.531783][ T27] audit: type=1326 audit(262877.691:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 479.550131][ T27] audit: type=1326 audit(262877.701:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95959a28 code=0x7ffc0000 [ 481.576957][T13240] loop6: detected capacity change from 0 to 1024 [ 481.610994][T13240] EXT4-fs: Ignoring removed nobh option [ 481.612181][T13240] EXT4-fs: Ignoring removed bh option [ 481.616194][T13240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 481.691709][T13240] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 482.339540][T13254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.343023][T13254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.189223][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 484.397155][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 484.517614][T10722] EXT4-fs (loop6): unmounting filesystem. [ 484.586891][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.836106][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.599426][T13263] loop6: detected capacity change from 0 to 128 [ 485.644798][T13263] EXT4-fs (loop6): Test dummy encryption mode enabled [ 485.649900][T13263] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 485.677878][T13263] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 486.368658][T13273] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 486.666310][ T4587] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 488.181354][ T4587] bond0 (unregistering): Released all slaves [ 488.524775][ T112] syzkaller0 speed is unknown, defaulting to 1000 [ 488.660650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.662650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.676140][T10722] EXT4-fs (loop6): unmounting filesystem. [ 488.680199][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.715114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.718397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.743727][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.756313][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.770023][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.773384][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.781554][T13036] device veth0_vlan entered promiscuous mode [ 488.792907][T13036] device veth1_vlan entered promiscuous mode [ 488.844541][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.852258][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.854523][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.858891][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.868757][T13036] device veth0_macvtap entered promiscuous mode [ 489.015426][T13283] device wg2 left promiscuous mode [ 489.019935][T13036] device veth1_macvtap entered promiscuous mode [ 489.031866][T13290] device wg2 entered promiscuous mode [ 489.043748][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.049382][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.051644][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.053901][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.062344][T13036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.065019][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.071382][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.073714][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.084709][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.089384][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.093414][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.099910][T13036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.105987][T13036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.134662][T13036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.199398][T13300] loop6: detected capacity change from 0 to 1024 [ 489.205068][T13300] EXT4-fs: Ignoring removed nobh option [ 489.211566][T13300] EXT4-fs: Ignoring removed bh option [ 489.211646][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.217466][T13300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 489.220072][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.223948][T13036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.232067][T13036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.236587][T13036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.243447][T13036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.321276][T13300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 489.445456][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.447651][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.457655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.537247][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.539279][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.544024][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.925405][T13299] loop4: detected capacity change from 0 to 40427 [ 490.957415][T13299] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 490.969434][T13318] loop1: detected capacity change from 0 to 512 [ 490.969694][T13299] F2FS-fs (loop4): invalid crc value [ 490.991487][T13299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 491.059262][T13318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 491.089804][T13299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.444571][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.446955][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.670718][T13192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.675035][T13192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.678143][T13192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.681300][T13192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.683477][T13192] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 491.685848][T13192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.735570][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 491.929375][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 491.933725][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 491.939682][ T8290] bridge0: port 1(syz_tun) entered disabled state [ 491.943600][ T7] usb 1-1: config 1 has no interface number 1 [ 491.953732][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.959225][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.960840][ T7] usb 1-1: Product: 粣䦵雎á±ê€¼é”—ë®’âµ³èŸä›ˆä·«ç«¿ë––㊥⓰费罚陙㔊罄鴲ê”䚅螽䓎N⠩ڗ잮ጓᙉ뼂䚚á…ꙛ쿠ײַ텠æ³ì“–ìŒêƒžé›’椳ë ì²‚䴆⋟癟辫ì¨áŠ±ê¾€îª¿î‰˜æ¾°íœ¼í˜±â€«ì¤­å§¡ãœ¦ëœŽâŒ¹ãŽîŠŽæ‹‹î¥ˆç¿”첿◎꒶늋먥驕㉨뭈⊬ [ 491.999800][ T7] usb 1-1: Manufacturer: ⥹溒秭ì–蟌쀰턣爬ૅ柿ڧá“㕋♑ç›é¬¥í›…锅ⷖ讵ʊﺓ㔭쵮ꊒ䙾ë⪎굮敾迼 [ 492.027368][ T8290] device syz_tun left promiscuous mode [ 492.028623][ T8290] bridge0: port 1(syz_tun) entered disabled state [ 492.108979][T13333] chnl_net:caif_netlink_parms(): no params data found [ 492.274507][ T7] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 492.368235][T12502] EXT4-fs (loop1): unmounting filesystem. [ 492.387367][ T7] usb 1-1: USB disconnect, device number 2 [ 492.611546][ T4587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.619647][T12911] udevd[12911]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.713039][T13192] Bluetooth: hci2: command 0x0409 tx timeout [ 495.976299][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.977243][T13192] Bluetooth: hci2: command 0x041b tx timeout [ 495.999164][ T4587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.016948][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.018584][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.031999][T13333] device bridge_slave_0 entered promiscuous mode [ 496.055293][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.057022][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.062375][T13333] device bridge_slave_1 entered promiscuous mode [ 496.251897][ T4587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.295152][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.381777][ T4587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.392541][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.434150][T13333] team0: Port device team_slave_0 added [ 496.448922][T13333] team0: Port device team_slave_1 added [ 496.486351][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.487848][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.503544][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.552260][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.553905][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.569919][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.877445][T13333] device hsr_slave_0 entered promiscuous mode [ 496.905970][T13333] device hsr_slave_1 entered promiscuous mode [ 496.935763][T13333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.937448][T13333] Cannot create hsr debugfs directory [ 496.938668][ T4587] tipc: Disabling bearer [ 496.940324][ T4587] tipc: Left network mode [ 497.681926][T13405] loop4: detected capacity change from 0 to 512 [ 498.054048][T13405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 498.263669][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 499.904597][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 500.353700][T13192] Bluetooth: hci2: command 0x0419 tx timeout [ 500.537259][ T112] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 500.975616][ T112] usb 1-1: not running at top speed; connect to a high speed hub [ 501.040997][ T112] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 501.043049][ T112] usb 1-1: config 1 has no interface number 1 [ 501.056061][ T112] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.058030][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.059691][ T112] usb 1-1: Product: syz [ 501.060577][ T112] usb 1-1: Manufacturer: syz [ 501.061660][ T112] usb 1-1: SerialNumber: syz [ 501.308868][T10722] EXT4-fs (loop6): unmounting filesystem. [ 501.372247][ T112] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 501.400401][ T112] usb 1-1: USB disconnect, device number 3 [ 502.206572][T13426] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3013'. [ 502.482571][T13346] udevd[13346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.739770][T13439] loop4: detected capacity change from 0 to 16 [ 502.868248][T13439] erofs: (device loop4): mounted with root inode @ nid 36. [ 502.903653][T13439] syz.4.3017: attempt to access beyond end of device [ 502.903653][T13439] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 503.693110][T13456] loop1: detected capacity change from 0 to 1024 [ 503.695104][T13456] EXT4-fs: Ignoring removed nobh option [ 503.696495][T13456] EXT4-fs: Ignoring removed bh option [ 503.698117][T13456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.975777][T13456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 506.064499][T12502] EXT4-fs (loop1): unmounting filesystem. [ 506.095025][T13333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 506.208008][T13333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 506.500561][T13333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 506.738548][T13333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.664107][T13506] loop1: detected capacity change from 0 to 1024 [ 507.666077][T13506] EXT4-fs: Ignoring removed nobh option [ 507.667254][T13506] EXT4-fs: Ignoring removed bh option [ 507.669507][T13506] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 507.694989][T13506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 507.721613][T12502] EXT4-fs (loop1): unmounting filesystem. [ 508.907996][T13519] loop1: detected capacity change from 0 to 512 [ 509.233100][T13519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 511.714073][T13550] loop6: detected capacity change from 0 to 1024 [ 511.733518][T12502] EXT4-fs (loop1): unmounting filesystem. [ 511.753893][T13550] EXT4-fs: Ignoring removed nobh option [ 511.779305][T13550] EXT4-fs: Ignoring removed bh option [ 511.792442][T13550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 512.066937][T13333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.075132][T13550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 512.148192][ T4587] device hsr_slave_0 left promiscuous mode [ 512.316335][ T4587] device hsr_slave_1 left promiscuous mode [ 513.000506][T13567] loop1: detected capacity change from 0 to 256 [ 513.137027][T13567] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 513.325475][ T4587] device veth1_macvtap left promiscuous mode [ 513.326956][ T4587] device veth0_macvtap left promiscuous mode [ 513.328263][ T4587] device veth1_vlan left promiscuous mode [ 513.329512][ T4587] device veth0_vlan left promiscuous mode [ 514.202284][ T4587] bond2 (unregistering): Released all slaves [ 514.209881][ T4587] bond1 (unregistering): Released all slaves [ 516.738620][T10722] EXT4-fs (loop6): unmounting filesystem. [ 518.992557][T13607] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 518.994105][T13607] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 519.733531][T13619] loop6: detected capacity change from 0 to 1024 [ 519.735801][T13619] EXT4-fs: Ignoring removed nobh option [ 519.737043][T13619] EXT4-fs: Ignoring removed bh option [ 519.746517][T13619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 519.807069][T13619] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 520.830061][ T4587] bond0 (unregistering): Released all slaves [ 521.124407][T13333] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.145594][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.147802][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.196978][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.199344][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.201489][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.203072][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.205162][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.218319][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.220385][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.222005][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.296115][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.298326][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.300759][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.303106][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.334070][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.342183][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.347385][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.369000][T13333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.371298][T13333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.449134][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.451923][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.454162][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.482408][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.485876][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.544082][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.750845][T10722] EXT4-fs (loop6): unmounting filesystem. [ 535.501713][T13645] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3073'. [ 535.520204][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.559423][T13333] device veth0_vlan entered promiscuous mode [ 535.599069][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.600795][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.602455][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.609476][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.648837][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.651239][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.666240][T13333] device veth1_vlan entered promiscuous mode [ 535.671456][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.684311][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.737906][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.740396][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.749848][T13333] device veth0_macvtap entered promiscuous mode [ 535.777293][T13333] device veth1_macvtap entered promiscuous mode [ 535.800835][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.803187][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.838767][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.839869][T13665] devtmpfs: Bad value for 'nr_inodes' [ 535.841214][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.844948][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.847217][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.850516][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.861971][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.864239][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.866965][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.869223][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.871490][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.873818][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.877727][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.879505][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.881839][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.884326][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.891554][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.618426][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.647475][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.291478][T13333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.293476][T13333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.305634][T13333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.307813][T13333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.310956][T13681] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3082'. [ 538.540040][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.541976][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.553234][T13688] loop1: detected capacity change from 0 to 2048 [ 538.559723][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.579949][T13688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 538.582273][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.587209][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.593677][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.824039][T12502] EXT4-fs (loop1): unmounting filesystem. [ 538.965148][T13693] input: syz0 as /devices/virtual/input/input5 [ 538.991972][T13704] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3089'. [ 539.025078][T13697] loop6: detected capacity change from 0 to 1024 [ 539.040588][T13697] EXT4-fs: Ignoring removed nobh option [ 539.048683][T13697] EXT4-fs: Ignoring removed bh option [ 539.054751][T13697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 539.146313][T13697] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 541.086174][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.092333][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.095081][ T4303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.099728][ T4303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.101767][ T4303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 541.103603][ T4303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.745744][ T4303] Bluetooth: hci4: command 0x0406 tx timeout [ 542.996979][T13727] chnl_net:caif_netlink_parms(): no params data found [ 543.155697][T13192] Bluetooth: hci1: command 0x0409 tx timeout [ 545.105050][T10722] EXT4-fs (loop6): unmounting filesystem. [ 545.230910][T13192] Bluetooth: hci1: command 0x041b tx timeout [ 545.549259][T13777] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 547.773474][ T4303] Bluetooth: hci1: command 0x040f tx timeout [ 549.080618][T13810] loop6: detected capacity change from 0 to 128 [ 549.083090][T13810] EXT4-fs (loop6): Test dummy encryption mode enabled [ 549.103422][T13810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 549.796744][T13192] Bluetooth: hci1: command 0x0419 tx timeout [ 556.027869][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.278232][T10722] EXT4-fs (loop6): unmounting filesystem. [ 558.397592][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.399215][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.401457][T13727] device bridge_slave_0 entered promiscuous mode [ 558.417204][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.425732][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.440921][T13727] device bridge_slave_1 entered promiscuous mode [ 558.690416][T13192] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.696766][T13192] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.699394][T13192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.703314][T13192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.706163][T13192] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 558.708101][T13192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.734464][ T4296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.739922][ T4296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 559.014464][ T4303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 559.475642][ T4303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 559.477684][ T4303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 559.479438][ T4303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.849310][ T4587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.439697][ T4587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.447664][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.483510][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.631548][T13860] loop6: detected capacity change from 0 to 1024 [ 560.653217][T13860] EXT4-fs: Ignoring removed nobh option [ 560.654395][T13860] EXT4-fs: Ignoring removed bh option [ 560.667787][ T4587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.718443][T13860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 560.742410][T13727] team0: Port device team_slave_0 added [ 560.746361][T13727] team0: Port device team_slave_1 added [ 560.755308][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 561.126101][T13864] tipc: Failed to remove unknown binding: 66,1,1/0:2135652941/2135652943 [ 561.128258][T13864] tipc: Failed to remove unknown binding: 66,1,1/0:2135652941/2135652943 [ 561.995343][ T4303] Bluetooth: hci3: command 0x0409 tx timeout [ 562.008119][ T4587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.051791][T13860] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 562.096229][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.097736][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.114310][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.202946][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.204589][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.246217][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.827331][T13192] Bluetooth: hci0: command 0x041b tx timeout [ 563.317033][T13727] device hsr_slave_0 entered promiscuous mode [ 563.345943][T13727] device hsr_slave_1 entered promiscuous mode [ 563.375363][T13727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.377064][T13727] Cannot create hsr debugfs directory [ 563.474124][T13829] chnl_net:caif_netlink_parms(): no params data found [ 563.538493][T13834] chnl_net:caif_netlink_parms(): no params data found [ 563.671518][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 563.671532][ T27] audit: type=1326 audit(262962.631:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.687657][ T4587] tipc: Disabling bearer [ 563.688976][ T4587] tipc: Left network mode [ 563.695545][ T27] audit: type=1326 audit(262962.631:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.699977][ T27] audit: type=1326 audit(262962.631:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.765411][ T27] audit: type=1326 audit(262962.631:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.775362][ T27] audit: type=1326 audit(262962.631:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.780130][ T27] audit: type=1326 audit(262962.631:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=197 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.784813][ T27] audit: type=1326 audit(262962.631:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.835325][ T27] audit: type=1326 audit(262962.631:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.839783][ T27] audit: type=1326 audit(262962.731:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.844853][ T27] audit: type=1326 audit(262962.731:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.2.3131" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 563.920115][T13834] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.922137][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.927004][T13834] device bridge_slave_0 entered promiscuous mode [ 564.025285][ T4303] Bluetooth: hci3: command 0x041b tx timeout [ 564.028792][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.030612][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.041349][T13829] device bridge_slave_0 entered promiscuous mode [ 564.064118][T13834] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.078638][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.080856][T13834] device bridge_slave_1 entered promiscuous mode [ 564.261613][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.263383][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.274535][T13829] device bridge_slave_1 entered promiscuous mode [ 564.419816][T13834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.423942][T13834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.905347][ T4303] Bluetooth: hci0: command 0x040f tx timeout [ 565.449231][T13829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.459630][T13829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.490549][T13834] team0: Port device team_slave_0 added [ 565.537779][T13834] team0: Port device team_slave_1 added [ 566.106924][ T4303] Bluetooth: hci3: command 0x040f tx timeout [ 566.358489][T13829] team0: Port device team_slave_0 added [ 566.525008][T13829] team0: Port device team_slave_1 added [ 566.545748][T13834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.547411][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.565009][T13834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.663420][T13834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.668327][T13834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.675531][T13834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.751392][T13829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.752850][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.761172][T13829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.883216][T13829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.886115][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.898843][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.968707][ T4587] device erspan0 left promiscuous mode [ 566.985287][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 567.047282][T13834] device hsr_slave_0 entered promiscuous mode [ 567.085618][T13834] device hsr_slave_1 entered promiscuous mode [ 567.125280][T13834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.126969][T13834] Cannot create hsr debugfs directory [ 567.387213][T13829] device hsr_slave_0 entered promiscuous mode [ 567.426349][T13829] device hsr_slave_1 entered promiscuous mode [ 567.575314][T13829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.577049][T13829] Cannot create hsr debugfs directory [ 568.185610][T13192] Bluetooth: hci3: command 0x0419 tx timeout [ 568.349753][T13932] bridge0: port 3(syz_tun) entered blocking state [ 568.351227][T13932] bridge0: port 3(syz_tun) entered disabled state [ 568.353271][T13932] device syz_tun entered promiscuous mode [ 568.354753][T13932] bridge0: port 3(syz_tun) entered blocking state [ 568.356217][T13932] bridge0: port 3(syz_tun) entered forwarding state [ 568.386504][T10722] EXT4-fs (loop6): unmounting filesystem. [ 568.687646][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 568.687663][ T27] audit: type=1326 audit(262967.641:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.693949][ T27] audit: type=1326 audit(262967.641:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.698790][ T27] audit: type=1326 audit(262967.651:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.703707][ T27] audit: type=1326 audit(262967.651:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.716375][ T27] audit: type=1326 audit(262967.651:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.721142][ T27] audit: type=1326 audit(262967.651:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.734382][ T27] audit: type=1326 audit(262967.651:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 568.743097][ T27] audit: type=1326 audit(262967.651:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 569.337003][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3139'. [ 569.639712][ T27] audit: type=1326 audit(262967.651:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 569.644174][ T27] audit: type=1326 audit(262967.651:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 570.912262][T13942] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3140'. [ 571.725039][ T4587] device batadv_slave_1 left promiscuous mode [ 571.820316][ T4587] device hsr_slave_0 left promiscuous mode [ 572.173112][T13971] tipc: Failed to remove unknown binding: 66,1,1/0:412771180/412771182 [ 572.175079][T13971] tipc: Failed to remove unknown binding: 66,1,1/0:412771180/412771182 [ 572.966068][ T4587] device hsr_slave_1 left promiscuous mode [ 573.135451][ T4587] device veth1_macvtap left promiscuous mode [ 573.137007][ T4587] device veth0_macvtap left promiscuous mode [ 573.138359][ T4587] device veth1_vlan left promiscuous mode [ 573.468763][ T4587] bond2 (unregistering): Released all slaves [ 573.475374][ T4587] bond1 (unregistering): Released all slaves [ 575.439241][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 575.649436][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 575.846906][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.106216][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.276300][ T4587] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 578.759525][ T4587] bond0 (unregistering): Released all slaves [ 578.913260][T13727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 578.987493][T13727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.111123][T13727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.150340][T13727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.257207][T13983] loop6: detected capacity change from 0 to 1024 [ 579.259872][T13983] EXT4-fs: Ignoring removed nobh option [ 579.261241][T13983] EXT4-fs: Ignoring removed bh option [ 579.296554][T13983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 579.323232][T13834] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 579.573149][T13829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 579.632650][T13983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 580.367929][T13834] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 580.421320][T13829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 580.487908][T13829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 580.528725][T13834] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 580.687767][T13834] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 580.836373][T14010] input: syz0 as /devices/virtual/input/input6 [ 581.638286][T13829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 581.793559][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.823616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 581.839022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.843941][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.046594][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.048997][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.051296][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.053078][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.055024][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 582.065931][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.068235][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.069721][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.071791][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.080810][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.112071][T13834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.139126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.415586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.422182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.424719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.434987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.438060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 582.440432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.442797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 582.445134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.828020][ T4587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.837718][T13727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 582.847208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.859667][T14032] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3150'. [ 582.878515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 582.880638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.968885][ T4587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.974764][T13834] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.021393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.023846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.026404][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.028018][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.101322][ T4587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.123918][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.126956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.149226][T13829] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.152720][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.155087][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.162622][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.164339][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.173931][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.178977][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.209604][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.212063][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.214022][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.215661][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.237255][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.245678][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.247966][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.249529][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.251589][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.273136][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.276003][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.338634][ T4587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.365583][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.368262][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.374965][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.380136][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.384276][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.392887][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.416863][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.421905][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.424057][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.428018][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.431728][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.434323][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.441026][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.443533][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.449820][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.476464][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.479232][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.483848][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.504687][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.507282][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.509733][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.524269][T13829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.528214][T13829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.531790][T13834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.547845][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.550118][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.738804][ T4587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.859187][ T4587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.934295][T13829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.946974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.948763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 584.017634][ T4587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.100902][ T4587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.123278][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 584.125300][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 584.136949][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 584.139466][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 584.151559][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.212850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 584.216159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 584.219508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.221734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.230466][T13727] device veth0_vlan entered promiscuous mode [ 584.303356][T13727] device veth1_vlan entered promiscuous mode [ 584.399924][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 584.409298][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 584.420221][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 584.428780][T11172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.445157][T13727] device veth0_macvtap entered promiscuous mode [ 584.449063][T13727] device veth1_macvtap entered promiscuous mode [ 584.502927][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.512605][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.514882][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.522644][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.524957][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.542742][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.545009][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.553754][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.563648][T13727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.599855][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 584.602216][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 584.604907][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.614704][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.617287][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 584.619495][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 584.635337][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.637686][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.639868][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.641989][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.656416][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.658668][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.665934][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.668126][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.681650][T13727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.720546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 584.722934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.727698][T13727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.729601][T13727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.731843][T13727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.733728][T13727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.759338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 584.761544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 584.763942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.770603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.917284][T10722] EXT4-fs (loop6): unmounting filesystem. [ 585.164985][T13829] device veth0_vlan entered promiscuous mode [ 585.413709][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 585.423852][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 585.894829][T14096] device pim6reg1 entered promiscuous mode [ 587.454562][T13829] device veth1_vlan entered promiscuous mode [ 587.500879][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.503371][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.511472][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.514810][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.523047][T13834] device veth0_vlan entered promiscuous mode [ 587.692019][ T9387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.701197][ T9387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.858539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 587.862908][T13834] device veth1_vlan entered promiscuous mode [ 587.891668][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.896525][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.027336][T13829] device veth0_macvtap entered promiscuous mode [ 588.045933][ T8839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.048009][ T8839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.053595][T13829] device veth1_macvtap entered promiscuous mode [ 588.069880][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 588.072781][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 588.077150][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 588.245336][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.247767][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.251853][T13834] device veth0_macvtap entered promiscuous mode [ 588.548029][T13834] device veth1_macvtap entered promiscuous mode [ 589.635505][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.637673][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.639583][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.641873][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.643950][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.646587][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.649621][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.651852][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.653988][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.656359][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.663556][T13829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.676701][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.679092][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.681432][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.691423][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 590.516215][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.518514][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.520557][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.522717][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.524712][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.527571][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.529655][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.531721][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.533696][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.535793][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.539040][T13829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.764525][T14153] loop4: detected capacity change from 0 to 1024 [ 590.769218][T14153] EXT4-fs: Ignoring removed nobh option [ 590.770463][T14153] EXT4-fs: Ignoring removed bh option [ 590.784119][T14153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 590.991280][T14153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 591.136160][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.144439][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.034790][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.038040][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.040509][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.043791][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.049253][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.051667][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.053938][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.056505][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.059164][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.061457][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.063799][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.066357][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.070971][T13727] EXT4-fs (loop4): unmounting filesystem. [ 594.071336][T13834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.084973][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.087570][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.089745][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.092017][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.099758][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.102246][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.104566][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.109484][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.111922][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.114275][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.116701][T13834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.118940][T13834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.122427][T13834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.125017][T14167] bridge0: port 3(syz_tun) entered blocking state [ 594.127430][T14167] bridge0: port 3(syz_tun) entered disabled state [ 594.129529][T14167] device syz_tun entered promiscuous mode [ 594.131116][T14167] bridge0: port 3(syz_tun) entered blocking state [ 594.132608][T14167] bridge0: port 3(syz_tun) entered forwarding state [ 594.236227][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.238533][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.277489][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.279967][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.284043][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.288166][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.453640][T13829] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.455749][T13829] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.458176][T13829] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.460092][T13829] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.510880][T14171] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3166'. [ 595.581953][T13834] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.583851][T13834] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.594700][T13834] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.607995][T13834] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.117727][T14199] loop4: detected capacity change from 0 to 256 [ 596.200124][T14199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 596.337365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.339455][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.344515][ T9599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.350500][ T9599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.461034][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 597.463695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.471590][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.494877][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.500471][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 597.528026][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.530173][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.537268][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.641358][ T4587] device hsr_slave_0 left promiscuous mode [ 597.665750][ T4587] device hsr_slave_1 left promiscuous mode [ 597.865426][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.867256][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.874688][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.915876][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.203617][ T4587] device bridge_slave_1 left promiscuous mode [ 598.271706][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.707950][ T4587] device bridge_slave_0 left promiscuous mode [ 598.709444][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.750151][ T4587] device hsr_slave_0 left promiscuous mode [ 598.806298][ T4587] device hsr_slave_1 left promiscuous mode [ 598.903366][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.905035][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.916623][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.918260][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.925768][ T4587] device bridge_slave_1 left promiscuous mode [ 598.927302][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.987844][ T4587] device bridge_slave_0 left promiscuous mode [ 598.989384][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.175500][ T4587] device veth1_macvtap left promiscuous mode [ 599.177035][ T4587] device veth0_macvtap left promiscuous mode [ 599.178325][ T4587] device veth1_vlan left promiscuous mode [ 599.179562][ T4587] device veth0_vlan left promiscuous mode [ 599.292505][ T4587] device veth1_macvtap left promiscuous mode [ 599.293923][ T4587] device veth0_macvtap left promiscuous mode [ 599.295491][ T4587] device veth1_vlan left promiscuous mode [ 599.296740][ T4587] device veth0_vlan left promiscuous mode [ 603.672425][T14238] loop4: detected capacity change from 0 to 1024 [ 603.674308][T14238] EXT4-fs: Ignoring removed nobh option [ 603.675614][T14238] EXT4-fs: Ignoring removed bh option [ 603.998377][T14238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 604.197716][T14238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 605.874933][T13727] EXT4-fs (loop4): unmounting filesystem. [ 605.932760][T14252] loop4: detected capacity change from 0 to 2048 [ 605.963117][T14252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 605.997340][T13727] EXT4-fs (loop4): unmounting filesystem. [ 607.101093][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 607.418256][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 607.863290][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.167750][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.429232][T14264] loop4: detected capacity change from 0 to 128 [ 608.437102][T14264] EXT4-fs (loop4): Test dummy encryption mode enabled [ 608.446408][T14264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 611.658889][ T4587] bond0 (unregistering): Released all slaves [ 613.720266][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.725337][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.728050][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.730377][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.732589][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 613.734289][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.982501][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 614.177562][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 614.366094][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.435394][T13192] Bluetooth: hci2: command 0x0406 tx timeout [ 614.626265][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.785312][T13192] Bluetooth: hci4: command 0x0409 tx timeout [ 617.452988][ T4587] bond0 (unregistering): Released all slaves [ 617.466567][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.726886][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.729155][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.731224][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.733282][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.735606][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.737834][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.739831][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.741886][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.743990][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.746335][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.748948][T14212] device vlan2 entered promiscuous mode [ 617.750076][T14212] device batadv_slave_0 entered promiscuous mode [ 617.753473][T14212] device batadv_slave_0 left promiscuous mode [ 617.828222][T14279] loop8: detected capacity change from 0 to 256 [ 617.917609][T13192] Bluetooth: hci4: command 0x041b tx timeout [ 617.966646][T13727] EXT4-fs (loop4): unmounting filesystem. [ 618.360785][T14304] loop8: detected capacity change from 0 to 1024 [ 618.365841][T14304] EXT4-fs: Ignoring removed nobh option [ 618.367236][T14304] EXT4-fs: Ignoring removed bh option [ 618.378834][T14304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 618.769069][T14304] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 619.358169][T14310] loop4: detected capacity change from 0 to 2048 [ 620.526505][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 620.714597][T14310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 620.737985][T14212] bridge0: port 3(syz_tun) entered disabled state [ 620.810759][T13834] EXT4-fs (loop8): unmounting filesystem. [ 620.822040][T14318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 620.868372][T14212] device syz_tun left promiscuous mode [ 620.869748][T14212] bridge0: port 3(syz_tun) entered disabled state [ 620.984851][T13727] EXT4-fs (loop4): unmounting filesystem. [ 621.396251][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.398299][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.456814][T14271] chnl_net:caif_netlink_parms(): no params data found [ 622.588788][T13192] Bluetooth: hci4: command 0x0419 tx timeout [ 622.703097][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.706921][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.721303][T14271] device bridge_slave_0 entered promiscuous mode [ 622.745274][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.755964][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.769424][T14271] device bridge_slave_1 entered promiscuous mode [ 622.872733][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.886234][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.937503][T14271] team0: Port device team_slave_0 added [ 622.945057][T14271] team0: Port device team_slave_1 added [ 622.989136][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.996142][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.012419][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.020370][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.022008][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.033926][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.186015][T14271] device hsr_slave_0 entered promiscuous mode [ 623.227634][T14271] device hsr_slave_1 entered promiscuous mode [ 623.703918][T14271] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 623.747427][T14271] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 623.790433][T14271] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 623.828152][T14271] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 624.021270][T14363] loop7: detected capacity change from 0 to 128 [ 624.038299][T14363] EXT4-fs (loop7): Test dummy encryption mode enabled [ 624.091677][T14363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 624.095580][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.134158][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.148676][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.171873][T14368] loop4: detected capacity change from 0 to 128 [ 624.174614][T14368] EXT4-fs (loop4): Test dummy encryption mode enabled [ 624.268697][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.333056][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.336950][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.344135][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.345777][ T9387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.349389][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.366670][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.366937][T14368] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 625.179351][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.181102][ T9387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.408076][T13829] EXT4-fs (loop7): unmounting filesystem. [ 626.450813][ T4587] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.490444][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.492765][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.497236][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.503143][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 626.522511][T14397] loop7: detected capacity change from 0 to 1024 [ 626.524663][T14397] EXT4-fs: Ignoring removed nobh option [ 626.526115][T14397] EXT4-fs: Ignoring removed bh option [ 626.538527][T14397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 626.570147][T14397] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 626.606196][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.619635][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 626.633290][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.678011][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.684119][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.697340][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 626.842006][T13727] EXT4-fs (loop4): unmounting filesystem. [ 627.189714][T14401] loop8: detected capacity change from 0 to 512 [ 627.268780][T14271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.271572][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 627.336199][T14409] devtmpfs: Too few inodes for current use [ 627.469798][ T4587] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.475957][T14401] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 628.503303][T13834] EXT4-fs (loop8): unmounting filesystem. [ 628.616127][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.765589][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.717463][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 629.717480][ T27] audit: type=1326 audit(263028.081:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.723311][ T27] audit: type=1326 audit(263028.081:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.729519][ T27] audit: type=1326 audit(263028.091:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=159 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.734071][ T27] audit: type=1326 audit(263028.101:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.738733][ T27] audit: type=1326 audit(263028.101:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.743259][ T27] audit: type=1326 audit(263028.111:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.747975][ T27] audit: type=1326 audit(263028.111:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.752220][ T27] audit: type=1326 audit(263028.111:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.756979][ T27] audit: type=1326 audit(263028.131:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.761441][ T27] audit: type=1326 audit(263028.131:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14419 comm="syz.4.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e559a28 code=0x7ffc0000 [ 629.876015][T13829] EXT4-fs (loop7): unmounting filesystem. [ 630.054261][ T4587] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.099941][ T4587] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.253674][T14465] loop8: detected capacity change from 0 to 1024 [ 631.255753][T14465] EXT4-fs: Ignoring removed nobh option [ 631.256957][T14465] EXT4-fs: Ignoring removed bh option [ 631.426422][T14458] loop7: detected capacity change from 0 to 512 [ 631.450154][T14465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.804279][T14465] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 632.815657][T14458] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 633.277726][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.279547][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.303164][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.355722][T13829] EXT4-fs (loop7): unmounting filesystem. [ 634.044737][T14502] bridge0: port 3(hsr_slave_1) entered blocking state [ 634.054500][T14502] bridge0: port 3(hsr_slave_1) entered disabled state [ 634.089434][T13834] EXT4-fs (loop8): unmounting filesystem. [ 634.249307][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.252143][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.311828][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.314251][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.324877][T14271] device veth0_vlan entered promiscuous mode [ 634.329544][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.331885][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.344292][T14271] device veth1_vlan entered promiscuous mode [ 634.372737][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 634.375102][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.398323][T14271] device veth0_macvtap entered promiscuous mode [ 634.655987][T14271] device veth1_macvtap entered promiscuous mode [ 635.157341][T14518] tipc: Started in network mode [ 635.158530][T14518] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 635.161200][T14518] tipc: Enabled bearer , priority 10 [ 635.200524][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.202759][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.204894][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.223908][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.240924][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.243577][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.261142][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.263496][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.275311][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.277511][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.294870][T14271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.328380][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.330726][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.333221][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.336829][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.259497][T12941] tipc: Node number set to 4269801488 [ 636.330414][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.332906][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.334996][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.351751][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.354354][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.373500][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.388360][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.390795][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.392916][T14271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.395162][T14271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.399000][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 636.399013][ T27] audit: type=1326 audit(263035.361:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.417234][T14271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.424763][ T27] audit: type=1326 audit(263035.381:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.454402][ T27] audit: type=1326 audit(263035.381:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.479336][ T27] audit: type=1326 audit(263035.381:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.484120][ T27] audit: type=1326 audit(263035.401:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.509178][ T27] audit: type=1326 audit(263035.401:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.530495][T14531] device wg2 entered promiscuous mode [ 636.599262][ T27] audit: type=1326 audit(263035.401:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.604356][ T27] audit: type=1326 audit(263035.401:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.609832][ T27] audit: type=1326 audit(263035.401:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.614805][ T27] audit: type=1326 audit(263035.401:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 636.627201][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.632993][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.641523][T14271] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.643712][T14271] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.646106][T14271] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.648309][T14271] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.870014][T14558] device pim6reg1 entered promiscuous mode [ 638.242549][T14573] loop8: detected capacity change from 0 to 16 [ 638.303682][T14573] erofs: (device loop8): mounted with root inode @ nid 36. [ 638.501381][T14573] syz.8.3241: attempt to access beyond end of device [ 638.501381][T14573] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 639.341447][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.343525][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.362077][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.407557][ T8839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.422250][ T8839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.634915][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 639.826176][T14610] overlayfs: failed to resolve './file2': -2 [ 640.625566][T14612] device pim6reg1 entered promiscuous mode [ 641.702722][T14639] loop9: detected capacity change from 0 to 128 [ 641.709781][T14639] EXT4-fs (loop9): Test dummy encryption mode enabled [ 641.772422][T14639] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 642.168460][T14653] overlayfs: failed to resolve './file2': -2 [ 643.589820][T14271] EXT4-fs (loop9): unmounting filesystem. [ 644.012642][T14667] device pim6reg1 entered promiscuous mode [ 644.020660][T14668] device pim6reg1 entered promiscuous mode [ 644.503538][ T4587] device hsr_slave_0 left promiscuous mode [ 646.583801][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 646.583817][ T27] audit: type=1326 audit(263043.621:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.605538][ T4587] device hsr_slave_1 left promiscuous mode [ 646.635698][ T27] audit: type=1326 audit(263043.621:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.643797][ T27] audit: type=1326 audit(263043.621:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=159 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.674432][ T27] audit: type=1326 audit(263043.621:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.691109][ T27] audit: type=1326 audit(263043.621:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.705747][ T27] audit: type=1326 audit(263043.621:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.710444][ T27] audit: type=1326 audit(263043.621:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.715375][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.717036][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.739941][ T27] audit: type=1326 audit(263043.621:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.740291][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.751508][ T4587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.753857][ T4587] device bridge_slave_1 left promiscuous mode [ 646.757949][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.772269][ T27] audit: type=1326 audit(263043.621:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.788689][ T27] audit: type=1326 audit(263043.621:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.2.3278" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88759a28 code=0x7ffc0000 [ 646.807405][ T4587] device bridge_slave_0 left promiscuous mode [ 646.808793][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.105672][ T4587] device veth1_macvtap left promiscuous mode [ 647.109174][ T4587] device veth0_macvtap left promiscuous mode [ 647.112647][ T4587] device veth1_vlan left promiscuous mode [ 647.118991][ T4587] device veth0_vlan left promiscuous mode [ 650.351059][ T4587] team0 (unregistering): Port device team_slave_1 removed [ 650.578930][ T4587] team0 (unregistering): Port device team_slave_0 removed [ 650.777535][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.018090][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.793749][ T4587] bond0 (unregistering): Released all slaves [ 656.054664][T14786] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3311'. [ 656.097950][T14783] device pim6reg1 entered promiscuous mode [ 656.390345][T14801] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 656.397149][T14801] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 656.453690][T14808] Â: renamed from pim6reg1 [ 657.026781][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3327'. [ 657.031777][T14834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 657.093236][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3328'. [ 657.631410][T14863] loop9: detected capacity change from 0 to 128 [ 657.690437][T14863] EXT4-fs (loop9): Test dummy encryption mode enabled [ 657.772305][T14863] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 658.029314][T14881] bridge0: port 1(bridge_slave_0) entered listening state [ 658.806151][T14271] EXT4-fs (loop9): unmounting filesystem. [ 659.072330][T14907] device batadv_slave_0 entered promiscuous mode [ 659.075650][T14907] device batadv_slave_0 left promiscuous mode [ 659.313488][T14924] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 659.398959][T14928] loop7: detected capacity change from 0 to 128 [ 659.431330][T14928] EXT4-fs (loop7): Test dummy encryption mode enabled [ 659.450793][T14930] netlink: 'syz.8.3356': attribute type 29 has an invalid length. [ 659.457292][T14930] netlink: 'syz.8.3356': attribute type 29 has an invalid length. [ 659.468320][T14930] netlink: 'syz.8.3356': attribute type 29 has an invalid length. [ 659.497356][T14928] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 660.489788][T13829] EXT4-fs (loop7): unmounting filesystem. [ 660.885673][T14977] dccp_close: ABORT with 30 bytes unread [ 661.152822][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3373'. [ 661.155505][T15002] IPv6: NLM_F_REPLACE set, but no existing node found! [ 661.276997][T15011] device veth0 entered promiscuous mode [ 661.279718][T15010] device veth0 left promiscuous mode [ 662.204886][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 662.490866][T15064] tipc: Enabled bearer , priority 0 [ 662.574879][T15064] device syzkaller0 entered promiscuous mode [ 662.582751][T15064] tipc: Resetting bearer [ 662.608373][T15065] dccp_close: ABORT with 10 bytes unread [ 662.622685][T15063] tipc: Resetting bearer [ 664.667816][T15086] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3402'. [ 665.626274][T13192] Bluetooth: hci1: command 0x0406 tx timeout [ 675.353413][T15063] tipc: Disabling bearer [ 675.576568][T15082] batman_adv: batadv0: Adding interface: dummy0 [ 675.577946][T15082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.583171][T15082] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 676.019291][T15115] loop8: detected capacity change from 0 to 128 [ 676.051560][T15115] EXT4-fs (loop8): Test dummy encryption mode enabled [ 676.126862][T15115] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 676.230419][T15122] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3413'. [ 676.849341][T15133] device syzkaller0 entered promiscuous mode [ 677.558150][T15144] loop7: detected capacity change from 0 to 1024 [ 677.612123][T15144] EXT4-fs: Ignoring removed nobh option [ 677.613516][T15144] EXT4-fs: Ignoring removed bh option [ 677.878778][T15144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 678.092633][T15144] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 678.462165][T13834] EXT4-fs (loop8): unmounting filesystem. [ 678.907726][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.997215][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 683.725098][T13829] EXT4-fs (loop7): unmounting filesystem. [ 686.114247][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 694.026352][ T4303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.031324][ T4303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.044188][ T4296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.066616][ T4296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.098615][ T4312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 694.116437][ T4312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.118949][ T4312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 694.123813][ T4312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 694.127634][ T4312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 694.129976][ T4312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 694.131860][ T4312] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 694.133530][ T4312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 694.375751][ T4296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 694.401215][ T4296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 694.426543][ T4296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 694.435698][ T4312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 694.437735][ T4312] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 694.439743][ T4312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 694.633963][T13192] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 694.643236][ T4296] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 694.651949][ T4296] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 694.675531][ T4296] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 694.691855][ T4296] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 694.711130][ T4296] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 696.193525][ T4312] Bluetooth: hci6: command 0x0409 tx timeout [ 696.201594][ T4296] Bluetooth: hci5: command 0x0409 tx timeout [ 696.517153][ T4296] Bluetooth: hci7: command 0x0409 tx timeout [ 696.756568][ T4312] Bluetooth: hci8: command 0x0409 tx timeout [ 698.275527][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 698.277161][ T4296] Bluetooth: hci6: command 0x041b tx timeout [ 698.605231][ T4312] Bluetooth: hci7: command 0x041b tx timeout [ 698.841385][ T4312] Bluetooth: hci8: command 0x041b tx timeout [ 699.345722][ T4312] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 699.351255][ T4312] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 699.362839][ T4312] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 699.394668][ T4312] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 699.434466][ T4312] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 699.436403][ T4312] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 700.348998][ T4312] Bluetooth: hci6: command 0x040f tx timeout [ 700.350345][ T4312] Bluetooth: hci5: command 0x040f tx timeout [ 700.676360][ T4312] Bluetooth: hci7: command 0x040f tx timeout [ 700.917123][ T4296] Bluetooth: hci8: command 0x040f tx timeout [ 701.474886][ T4312] Bluetooth: hci9: command 0x0409 tx timeout [ 702.427771][ T4296] Bluetooth: hci5: command 0x0419 tx timeout [ 702.429243][ T4296] Bluetooth: hci6: command 0x0419 tx timeout [ 702.755845][ T4312] Bluetooth: hci7: command 0x0419 tx timeout [ 702.995502][ T4296] Bluetooth: hci8: command 0x0419 tx timeout [ 703.554315][ T4312] Bluetooth: hci9: command 0x041b tx timeout [ 705.630111][ T4296] Bluetooth: hci9: command 0x040f tx timeout [ 707.712918][ T4312] Bluetooth: hci9: command 0x0419 tx timeout [ 737.316043][ T4312] Bluetooth: hci4: command 0x0406 tx timeout [ 740.369351][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.294407][ T4312] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 762.298251][ T4312] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 762.300792][ T4312] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 762.303750][ T4312] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 762.305856][ T4312] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 762.307714][ T4312] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 762.575967][ T4312] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 762.580097][ T4312] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 762.602067][ T4312] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 762.604536][ T4312] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 762.606959][ T4312] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 762.608727][ T4312] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 762.765561][ T4312] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 762.781834][ T4312] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 762.814173][ T4312] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 762.862010][ T4312] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 762.890448][ T4312] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 762.911704][ T4312] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 763.028300][ T4312] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 763.071968][ T4312] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 763.106280][ T4312] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 763.181426][T15183] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 763.184936][T15183] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 763.188310][T15183] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 763.191646][T13192] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 763.216834][T13192] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 763.225866][ T4312] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 763.248789][T13192] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 763.265459][T13192] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 763.276738][T13192] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 764.433535][T13192] Bluetooth: hci10: command 0x0409 tx timeout [ 764.754310][ T4296] Bluetooth: hci11: command 0x0409 tx timeout [ 764.996130][ T4296] Bluetooth: hci12: command 0x0409 tx timeout [ 765.238649][ T4296] Bluetooth: hci13: command 0x0409 tx timeout [ 765.393727][ T4296] Bluetooth: hci14: command 0x0409 tx timeout [ 766.514613][ T4296] Bluetooth: hci10: command 0x041b tx timeout [ 766.833950][T13192] Bluetooth: hci11: command 0x041b tx timeout [ 767.075506][T13192] Bluetooth: hci12: command 0x041b tx timeout [ 767.315748][ T4296] Bluetooth: hci13: command 0x041b tx timeout [ 767.471502][T13192] Bluetooth: hci14: command 0x041b tx timeout [ 768.592739][T13192] Bluetooth: hci10: command 0x040f tx timeout [ 768.913632][ T4296] Bluetooth: hci11: command 0x040f tx timeout [ 769.154560][ T4296] Bluetooth: hci12: command 0x040f tx timeout [ 769.393336][ T4296] Bluetooth: hci13: command 0x040f tx timeout [ 769.554473][ T4296] Bluetooth: hci14: command 0x040f tx timeout [ 770.691396][T13192] Bluetooth: hci10: command 0x0419 tx timeout [ 770.993933][ T4296] Bluetooth: hci11: command 0x0419 tx timeout [ 771.231885][ T4296] Bluetooth: hci12: command 0x0419 tx timeout [ 771.471870][ T4296] Bluetooth: hci13: command 0x0419 tx timeout [ 771.633495][ T4296] Bluetooth: hci14: command 0x0419 tx timeout [ 801.795252][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.311510][T15183] Bluetooth: hci5: command 0x0406 tx timeout [ 819.312846][T15183] Bluetooth: hci7: command 0x0406 tx timeout [ 819.391475][ T4312] Bluetooth: hci6: command 0x0406 tx timeout [ 819.391673][T15183] Bluetooth: hci8: command 0x0406 tx timeout [ 821.327860][ T4296] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 821.331791][ T4296] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 821.335942][ T4296] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 821.340683][ T4296] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 821.342795][ T4296] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 821.345649][ T4296] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 821.379121][ T4296] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 821.394482][ T4296] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 821.396620][T13192] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 821.398502][T13192] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 821.431053][ T4312] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 821.445751][ T4312] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 821.607075][ T4296] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 821.612495][ T4296] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 821.626091][T15183] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 821.656543][T15183] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 821.665233][T15183] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 821.668547][T15183] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 823.468213][T13192] Bluetooth: hci15: command 0x0409 tx timeout [ 823.522431][T13192] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 823.527645][T13192] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 823.530124][T13192] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 823.539628][T13192] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 823.576601][T13192] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 823.593785][T13192] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 823.628011][ T4312] Bluetooth: hci16: command 0x0409 tx timeout [ 823.656720][ T4312] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 823.667198][ T4312] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 823.670289][T15183] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 823.672559][T15183] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 823.675531][T15183] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 823.677252][T15183] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 823.789208][ T4312] Bluetooth: hci17: command 0x0409 tx timeout [ 824.353414][T15183] Bluetooth: hci9: command 0x0406 tx timeout [ 825.547042][ T4312] Bluetooth: hci15: command 0x041b tx timeout [ 825.632617][T15183] Bluetooth: hci18: command 0x0409 tx timeout [ 825.723653][T15183] Bluetooth: hci19: command 0x0409 tx timeout [ 825.724645][ T4312] Bluetooth: hci16: command 0x041b tx timeout [ 825.899786][T15183] Bluetooth: hci17: command 0x041b tx timeout [ 827.628781][T15183] Bluetooth: hci15: command 0x040f tx timeout [ 827.711413][ T4312] Bluetooth: hci18: command 0x041b tx timeout [ 827.794542][T15183] Bluetooth: hci19: command 0x041b tx timeout [ 827.795967][T15183] Bluetooth: hci16: command 0x040f tx timeout [ 827.952158][ T4312] Bluetooth: hci17: command 0x040f tx timeout [ 829.706330][ T4312] Bluetooth: hci15: command 0x0419 tx timeout [ 829.790264][T15183] Bluetooth: hci18: command 0x040f tx timeout [ 829.868121][ T4312] Bluetooth: hci16: command 0x0419 tx timeout [ 829.869526][ T4312] Bluetooth: hci19: command 0x040f tx timeout [ 830.040268][T15183] Bluetooth: hci17: command 0x0419 tx timeout [ 831.868973][ T4312] Bluetooth: hci18: command 0x0419 tx timeout [ 831.951882][T15183] Bluetooth: hci19: command 0x0419 tx timeout [ 834.438529][ T28] INFO: task dhcpcd:3966 blocked for more than 143 seconds. [ 834.440115][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.441431][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc [ 834.484284][ T28] task:dhcpcd state:D stack:0 pid:3966 ppid:3965 flags:0x0000000c [ 834.486423][ T28] Call trace: [ 834.487128][ T28] __switch_to+0x308/0x598 [ 834.488087][ T28] __schedule+0xef4/0x1d44 [ 834.489064][ T28] schedule+0xc4/0x170 [ 834.490015][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.491158][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.492300][ T28] mutex_lock_nested+0x38/0x44 [ 834.493383][ T28] rtnl_lock+0x20/0x2c [ 834.494291][ T28] devinet_ioctl+0x278/0x17d4 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 834.525308][ T28] inet_ioctl+0x2ac/0x4d8 [ 834.526258][ T28] sock_do_ioctl+0x134/0x2dc [ 834.527258][ T28] sock_ioctl+0x4ec/0x858 [ 834.528211][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 834.529214][ T28] invoke_syscall+0x98/0x2bc [ 834.530184][ T28] el0_svc_common+0x138/0x258 [ 834.531175][ T28] do_el0_svc+0x58/0x13c [ 834.531932][ T28] el0_svc+0x58/0x168 [ 834.532774][ T28] el0t_64_sync_handler+0x84/0xf0 [ 834.533831][ T28] el0t_64_sync+0x18c/0x190 [ 834.534829][ T28] INFO: task kworker/u4:26:9599 blocked for more than 143 seconds. [ 834.559825][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.561128][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.563219][ T28] task:kworker/u4:26 state:D stack:0 pid:9599 ppid:2 flags:0x00000008 [ 834.565354][ T28] Workqueue: events_unbound linkwatch_event [ 834.566636][ T28] Call trace: [ 834.567363][ T28] __switch_to+0x308/0x598 [ 834.568344][ T28] __schedule+0xef4/0x1d44 [ 834.569324][ T28] schedule+0xc4/0x170 [ 834.570160][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.571368][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.593965][ T28] mutex_lock_nested+0x38/0x44 [ 834.595025][ T28] rtnl_lock+0x20/0x2c [ 834.596063][ T28] linkwatch_event+0x14/0x68 [ 834.597062][ T28] process_one_work+0x7ac/0x1404 [ 834.598043][ T28] worker_thread+0x8e4/0xfec [ 834.598945][ T28] kthread+0x250/0x2d8 [ 834.599924][ T28] ret_from_fork+0x10/0x20 [ 834.607593][ T28] INFO: task syz.4.3417:15146 blocked for more than 143 seconds. [ 834.609316][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.610614][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.612343][ T28] task:syz.4.3417 state:D stack:0 pid:15146 ppid:13727 flags:0x00000001 [ 834.614259][ T28] Call trace: [ 834.614902][ T28] __switch_to+0x308/0x598 [ 834.648577][ T28] __schedule+0xef4/0x1d44 [ 834.649568][ T28] schedule+0xc4/0x170 [ 834.650550][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.651757][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.652976][ T28] mutex_lock_nested+0x38/0x44 [ 834.654063][ T28] rtnl_lock+0x20/0x2c [ 834.654899][ T28] __tun_chr_ioctl+0x4a0/0x2b88 [ 834.656899][ T28] tun_chr_ioctl+0x38/0x4c [ 834.657921][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 834.658973][ T28] invoke_syscall+0x98/0x2bc [ 834.659943][ T28] el0_svc_common+0x138/0x258 [ 834.661107][ T28] do_el0_svc+0x58/0x13c [ 834.662015][ T28] el0_svc+0x58/0x168 [ 834.662832][ T28] el0t_64_sync_handler+0x84/0xf0 [ 834.664030][ T28] el0t_64_sync+0x18c/0x190 [ 834.665047][ T28] INFO: task syz.4.3417:15149 blocked for more than 143 seconds. [ 834.700494][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.701875][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.703684][ T28] task:syz.4.3417 state:D stack:0 pid:15149 ppid:13727 flags:0x00000001 [ 834.705888][ T28] Call trace: [ 834.706754][ T28] __switch_to+0x308/0x598 [ 834.707698][ T28] __schedule+0xef4/0x1d44 [ 834.708578][ T28] schedule+0xc4/0x170 [ 834.709494][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.710692][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.711771][ T28] mutex_lock_nested+0x38/0x44 [ 834.712779][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 834.713791][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 834.714774][ T28] rtnetlink_rcv+0x28/0x38 [ 834.746100][ T28] netlink_unicast+0x65c/0x898 [ 834.747220][ T28] netlink_sendmsg+0x834/0xb18 [ 834.748278][ T28] ____sys_sendmsg+0x55c/0x848 [ 834.749345][ T28] __sys_sendmsg+0x26c/0x33c [ 834.750410][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 834.751525][ T28] invoke_syscall+0x98/0x2bc [ 834.752609][ T28] el0_svc_common+0x138/0x258 [ 834.753672][ T28] do_el0_svc+0x58/0x13c [ 834.754637][ T28] el0_svc+0x58/0x168 [ 834.790163][ T28] el0t_64_sync_handler+0x84/0xf0 [ 834.791278][ T28] el0t_64_sync+0x18c/0x190 [ 834.792382][ T28] INFO: task syz.8.3418:15157 blocked for more than 143 seconds. [ 834.793969][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.795162][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.797007][ T28] task:syz.8.3418 state:D stack:0 pid:15157 ppid:13834 flags:0x00000001 [ 834.798862][ T28] Call trace: [ 834.833252][ T28] __switch_to+0x308/0x598 [ 834.834248][ T28] __schedule+0xef4/0x1d44 [ 834.835326][ T28] schedule+0xc4/0x170 [ 834.836202][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.837331][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.838414][ T28] mutex_lock_nested+0x38/0x44 [ 834.839475][ T28] rtnl_lock+0x20/0x2c [ 834.840369][ T28] __tun_chr_ioctl+0x4a0/0x2b88 [ 834.841488][ T28] tun_chr_ioctl+0x38/0x4c [ 834.842459][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 834.843628][ T28] invoke_syscall+0x98/0x2bc [ 834.844556][ T28] el0_svc_common+0x138/0x258 [ 834.893540][ T28] do_el0_svc+0x58/0x13c [ 834.894498][ T28] el0_svc+0x58/0x168 [ 834.895493][ T28] el0t_64_sync_handler+0x84/0xf0 [ 834.896543][ T28] el0t_64_sync+0x18c/0x190 [ 834.911010][ T28] INFO: task syz.8.3418:15160 blocked for more than 143 seconds. [ 834.912688][ T28] Not tainted 6.1.127-syzkaller #0 [ 834.913894][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.933118][ T28] task:syz.8.3418 state:D stack:0 pid:15160 ppid:13834 flags:0x00000001 [ 834.935243][ T28] Call trace: [ 834.936000][ T28] __switch_to+0x308/0x598 [ 834.936985][ T28] __schedule+0xef4/0x1d44 [ 834.937952][ T28] schedule+0xc4/0x170 [ 834.938773][ T28] schedule_preempt_disabled+0x18/0x2c [ 834.939955][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 834.941076][ T28] mutex_lock_nested+0x38/0x44 [ 834.942147][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 834.943155][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 834.944104][ T28] rtnetlink_rcv+0x28/0x38 [ 834.945079][ T28] netlink_unicast+0x65c/0x898 [ 834.991971][ T28] netlink_sendmsg+0x834/0xb18 [ 834.993023][ T28] ____sys_sendmsg+0x55c/0x848 [ 834.994070][ T28] __sys_sendmsg+0x26c/0x33c [ 834.995060][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 834.996266][ T28] invoke_syscall+0x98/0x2bc [ 834.997331][ T28] el0_svc_common+0x138/0x258 [ 834.998378][ T28] do_el0_svc+0x58/0x13c [ 834.999356][ T28] el0_svc+0x58/0x168 [ 835.000320][ T28] el0t_64_sync_handler+0x84/0xf0 [ 835.001363][ T28] el0t_64_sync+0x18c/0x190 [ 835.002371][ T28] INFO: task syz.2.3420:15166 blocked for more than 143 seconds. [ 835.003915][ T28] Not tainted 6.1.127-syzkaller #0 [ 835.024122][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.026205][ T28] task:syz.2.3420 state:D stack:0 pid:15166 ppid:13333 flags:0x00000001 [ 835.028169][ T28] Call trace: [ 835.028814][ T28] __switch_to+0x308/0x598 [ 835.029649][ T28] __schedule+0xef4/0x1d44 [ 835.030670][ T28] schedule+0xc4/0x170 [ 835.031525][ T28] schedule_preempt_disabled+0x18/0x2c [ 835.032702][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 835.033914][ T28] mutex_lock_nested+0x38/0x44 [ 835.035001][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.060344][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 835.061421][ T28] rtnetlink_rcv+0x28/0x38 [ 835.062353][ T28] netlink_unicast+0x65c/0x898 [ 835.063377][ T28] netlink_sendmsg+0x834/0xb18 [ 835.064404][ T28] ____sys_sendmsg+0x55c/0x848 [ 835.065462][ T28] __sys_sendmmsg+0x318/0x7d8 [ 835.066415][ T28] __arm64_sys_sendmmsg+0xa0/0xbc [ 835.067574][ T28] invoke_syscall+0x98/0x2bc [ 835.068523][ T28] el0_svc_common+0x138/0x258 [ 835.069530][ T28] do_el0_svc+0x58/0x13c [ 835.070375][ T28] el0_svc+0x58/0x168 [ 835.071326][ T28] el0t_64_sync_handler+0x84/0xf0 [ 835.072425][ T28] el0t_64_sync+0x18c/0x190 [ 835.117866][ T28] INFO: task syz.7.3421:15169 blocked for more than 144 seconds. [ 835.119628][ T28] Not tainted 6.1.127-syzkaller #0 [ 835.120740][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.122607][ T28] task:syz.7.3421 state:D stack:0 pid:15169 ppid:13829 flags:0x00000001 [ 835.124622][ T28] Call trace: [ 835.139941][ T28] __switch_to+0x308/0x598 [ 835.140942][ T28] __schedule+0xef4/0x1d44 [ 835.141986][ T28] schedule+0xc4/0x170 [ 835.142857][ T28] schedule_preempt_disabled+0x18/0x2c [ 835.144169][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 835.145295][ T28] mutex_lock_nested+0x38/0x44 [ 835.146213][ T28] rtnl_lock+0x20/0x2c [ 835.147224][ T28] __tun_chr_ioctl+0x4a0/0x2b88 [ 835.148235][ T28] tun_chr_ioctl+0x38/0x4c [ 835.149244][ T28] __arm64_sys_ioctl+0x14c/0x1c8 [ 835.150254][ T28] invoke_syscall+0x98/0x2bc [ 835.151258][ T28] el0_svc_common+0x138/0x258 [ 835.152262][ T28] do_el0_svc+0x58/0x13c [ 835.153279][ T28] el0_svc+0x58/0x168 [ 835.154134][ T28] el0t_64_sync_handler+0x84/0xf0 [ 835.208954][ T28] el0t_64_sync+0x18c/0x190 [ 835.209927][ T28] INFO: task syz.7.3421:15172 blocked for more than 144 seconds. [ 835.211432][ T28] Not tainted 6.1.127-syzkaller #0 [ 835.212553][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.214501][ T28] task:syz.7.3421 state:D stack:0 pid:15172 ppid:13829 flags:0x00000001 [ 835.216513][ T28] Call trace: [ 835.217265][ T28] __switch_to+0x308/0x598 [ 835.218211][ T28] __schedule+0xef4/0x1d44 [ 835.219194][ T28] schedule+0xc4/0x170 [ 835.220043][ T28] schedule_preempt_disabled+0x18/0x2c [ 835.221263][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 835.222425][ T28] mutex_lock_nested+0x38/0x44 [ 835.223593][ T28] rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.224723][ T28] netlink_rcv_skb+0x20c/0x3b8 [ 835.238193][ T28] rtnetlink_rcv+0x28/0x38 [ 835.239246][ T28] netlink_unicast+0x65c/0x898 [ 835.240225][ T28] netlink_sendmsg+0x834/0xb18 [ 835.241271][ T28] ____sys_sendmsg+0x55c/0x848 [ 835.242313][ T28] __sys_sendmsg+0x26c/0x33c [ 835.243297][ T28] __arm64_sys_sendmsg+0x80/0x94 [ 835.244456][ T28] invoke_syscall+0x98/0x2bc [ 835.260239][ T28] el0_svc_common+0x138/0x258 [ 835.261297][ T28] do_el0_svc+0x58/0x13c [ 835.262138][ T28] el0_svc+0x58/0x168 [ 835.262945][ T28] el0t_64_sync_handler+0x84/0xf0 [ 835.263993][ T28] el0t_64_sync+0x18c/0x190 [ 835.281268][ T28] [ 835.281268][ T28] Showing all locks held in the system: [ 835.283124][ T28] 1 lock held by init/1: [ 835.284063][ T28] 1 lock held by rcu_tasks_kthre/12: [ 835.285119][ T28] #0: ffff800015c65530 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 835.287522][ T28] 1 lock held by rcu_tasks_trace/13: [ 835.288575][ T28] #0: ffff800015c65d30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 835.291120][ T28] 1 lock held by khungtaskd/28: [ 835.292257][ T28] #0: ffff800015c65360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 835.294265][ T28] 1 lock held by klogd/3901: [ 835.324199][ T28] 1 lock held by dhcpcd/3966: [ 835.325370][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.327183][ T28] 2 locks held by getty/4053: [ 835.328318][ T28] #0: ffff0000d6452098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 835.330287][ T28] #1: ffff80001d8402f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 835.332469][ T28] 3 locks held by kworker/1:4/4305: [ 835.333562][ T28] #0: ffff0000d6034138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 835.360147][ T28] #1: ffff8000211b7c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 835.363010][ T28] #2: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.364805][ T28] 3 locks held by kworker/0:5/4383: [ 835.365939][ T28] #0: ffff0000d6034138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 835.368328][ T28] #1: ffff800021927c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 835.371124][ T28] #2: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.372953][ T28] 3 locks held by kworker/u4:9/4586: [ 835.374062][ T28] #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 835.436667][ T28] #1: ffff800021587c20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 835.439086][ T28] #2: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.440987][ T28] 3 locks held by kworker/u4:26/9599: [ 835.442030][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 835.444484][ T28] #1: ffff800021687c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 835.471549][ T28] #2: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.473443][ T28] 3 locks held by kworker/0:3/12801: [ 835.474546][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 835.477095][ T28] #1: ffff800022047c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 835.479219][ T28] #2: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.481084][ T28] 1 lock held by syz.9.3414/15137: [ 835.482191][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.484142][ T28] 1 lock held by syz.4.3417/15146: [ 835.510676][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.512711][ T28] 1 lock held by syz.4.3417/15149: [ 835.513776][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.515928][ T28] 1 lock held by syz.8.3418/15157: [ 835.516959][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.518873][ T28] 1 lock held by syz.8.3418/15160: [ 835.519942][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.521972][ T28] 1 lock held by syz.2.3420/15166: [ 835.523047][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.525038][ T28] 1 lock held by syz.7.3421/15169: [ 835.558071][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 835.560194][ T28] 1 lock held by syz.7.3421/15172: [ 835.561156][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.563187][ T28] 1 lock held by syz-executor/15178: [ 835.564527][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.597018][ T28] 1 lock held by syz-executor/15181: [ 835.598246][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.607716][ T28] 1 lock held by syz-executor/15186: [ 835.608836][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.610829][ T28] 1 lock held by syz-executor/15190: [ 835.611897][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.614050][ T28] 1 lock held by syz-executor/15193: [ 835.615246][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.617545][ T28] 1 lock held by syz-executor/15202: [ 835.618713][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.620665][ T28] 1 lock held by syz-executor/15205: [ 835.621831][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.623812][ T28] 1 lock held by syz-executor/15207: [ 835.624937][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.651215][ T28] 1 lock held by syz-executor/15211: [ 835.652440][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.654420][ T28] 1 lock held by syz-executor/15214: [ 835.655622][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.657642][ T28] 1 lock held by syz-executor/15222: [ 835.658745][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.660764][ T28] 1 lock held by syz-executor/15223: [ 835.661955][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.663968][ T28] 1 lock held by syz-executor/15227: [ 835.683837][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.685935][ T28] 1 lock held by syz-executor/15234: [ 835.687061][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.689052][ T28] 1 lock held by syz-executor/15236: [ 835.690185][ T28] #0: ffff8000180c4fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 835.704983][ T28] [ 835.705573][ T28] ============================================= [ 835.705573][ T28] [ 835.707523][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 835.708995][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0 [ 835.710491][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 835.712493][ T28] Call trace: [ 835.713151][ T28] dump_backtrace+0x1c8/0x1f4 [ 835.714139][ T28] show_stack+0x2c/0x3c [ 835.715013][ T28] dump_stack_lvl+0x108/0x170 [ 835.716022][ T28] dump_stack+0x1c/0x5c [ 835.716936][ T28] panic+0x300/0x804 [ 835.717833][ T28] hung_task_panic+0x0/0x2c [ 835.718997][ T28] kthread+0x250/0x2d8 [ 835.720099][ T28] ret_from_fork+0x10/0x20 [ 835.721062][ T28] SMP: stopping secondary CPUs [ 835.722141][ T28] Kernel Offset: disabled [ 835.723081][ T28] CPU features: 0x080000,02070084,26017203 [ 835.724517][ T28] Memory Limit: none [ 836.348226][ T28] Rebooting in 86400 seconds..