last executing test programs: 2m25.008927408s ago: executing program 1 (id=56): socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0a7, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_buf(r3, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000000c0)) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) 2m25.008688468s ago: executing program 1 (id=57): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0xf000, 0x3, &(0x7f0000d75000/0xf000)=nil) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f00007ff000/0x800000)=nil) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1ff}}}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0xd00, 0x1f, 0x6, 0xfff, 0x3, 0xcc7, 0x0, 0x6, 0x5, 0x100ff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x3, 0xbc761c6, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x5, 0x2000006, 0x800b, 0x32, 0x5, 0x2, 0xd, 0x1, 0xffffff5c]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 2m23.178268371s ago: executing program 1 (id=79): r0 = socket$key(0xf, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 2m22.273120778s ago: executing program 1 (id=82): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001440)={0x3, 0x100000000, @status={[0x0, 0x6, 0x8000000000000001, 0xebb, 0x2, 0x7]}, [0xfb, 0x2, 0x400, 0xb0c, 0x3ff, 0x6, 0x3, 0x5, 0xff, 0x1, 0x7, 0x6, 0x3, 0x4, 0xf, 0x2cda, 0x2, 0xf7, 0x8, 0x280, 0x0, 0x9, 0x1, 0x8, 0x6, 0xff, 0x81, 0x8590, 0x4, 0x5, 0x80000001, 0x8, 0x4, 0x7, 0x1, 0x8, 0x79, 0x3, 0x2ee, 0x10000, 0x9, 0x6, 0x2, 0xff, 0x1, 0x100, 0xab, 0x3, 0x50d, 0xc, 0x0, 0x1, 0x80000000, 0x3, 0x9, 0xb4, 0x7fff, 0xd98, 0x81, 0x8000000000000001, 0x9423, 0x4817, 0xfffffffffffff801, 0x959f]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="03", 0x1, 0x11, &(0x7f0000000200)={0xa, 0x3, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f0000000140)=@v2={0x2000000, [{0xa91e, 0x8}, {0x80000000, 0x63}]}, 0x14, 0x0) 2m22.145100481s ago: executing program 1 (id=83): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44020000190001002abd7000feffffff0a14140000020001", @ANYRES32=0x0, @ANYBLOB="0c00090001001a03", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="05001400fc000000460008809989d4eaf73b8fc6d2efbffdf79366a0f0d6b7ac0a96e42f5cced3c8e9b5fffba92a3d6808f7438fa239bf01c1b522a49884a026049ebe99c15d5c68475fe67c61d2000008001900", @ANYRES32, @ANYBLOB="080006"], 0x244}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000300)=0x0) write$cgroup_pid(r5, &(0x7f00000002c0)=r6, 0x12) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0xff84) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0xd4, 0x464, 0x400, 0x70bd29, 0x25dfdbfc, "8b777b4a5447820a803b18511ba94436b8d18f68f5d793b65023a1dfb261a0bf9828dfb585ea480df3c6ca680b3b6499f9c3aeb8975eb1f22b549638bb185671cd3d028bcd015004724b60104fcbc404962f2e7d192c0eba5529d1c3e422a82a044502965d32aa0faf406ddc56f7ab33351c10565065662a0bc469862a9b90f22187d037dd6f7e8a1070689df86392c591a719bc79e852231a303ae0535a371011b3e37cb493497dc6bf840e9e9a1fd426c6870c5f3af9ec6f6ceeb7a4db05fb185ccd", ["", "", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) 2m20.776969372s ago: executing program 1 (id=101): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x0, 0x78}, 0x2c) add_key(0x0, 0x0, &(0x7f0000000040)="4ab123006f62b7772c8d15570f79ff2e88115a69da0bd12324", 0x19, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x33, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000040)={r7, 0x2, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r7, 0x5}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0xe24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}, 0x0) 2m20.721430743s ago: executing program 32 (id=101): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x0, 0x78}, 0x2c) add_key(0x0, 0x0, &(0x7f0000000040)="4ab123006f62b7772c8d15570f79ff2e88115a69da0bd12324", 0x19, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/29, 0x1d}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x33, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000040)={r7, 0x2, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r7, 0x5}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0xe24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}, 0x0) 2m6.868505328s ago: executing program 3 (id=140): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x2010800, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f8, &(0x7f0000005980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x200, 0x1) statx(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r5, 0x15, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) setuid(r3) getdents64(r2, 0x0, 0x0) 2m5.892750797s ago: executing program 3 (id=145): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) (fail_nth: 5) 2m5.723724112s ago: executing program 3 (id=146): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/241, 0xf1) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 2m5.630052835s ago: executing program 3 (id=147): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x88}}, 0x14) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f00000002c0), 0xff, 0x578, &(0x7f0000002900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000006c0)={0xfffffffc, 0x6630, 0xa, 0x1, 0x8, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$cgroup(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000140), 0x8004, &(0x7f0000000480)={[{@name={'name', 0x3d, 'u\xb5X\xf3\a7e\xde\x1cseY\x00\x00\xbf\xa9\xd6L\x1e\x17\xadm\x86\xc9\xed\f,\xe7\xces\x96\x16\x82\xc9\x02\xa5\xb9$P\x03\x06\xe1\xd5d\x9c!q\xa3Xv&5\b\xc1`\x91\x1a$\xa2\x8eB\x14\xb75z\x91w\xe1\xd7$\x0f\x92Rh[\xab\xb7HV\xd7\xfb\xbc5\xce\xb8\xa5\xa6\x82bD\x03\xf5\xa5i\xfb\ay\xfe\xb2\b\xa6\xf3\x05+&\xa8\xd9\xab\xd1d\xb6\xa9C\x9e\xc4\xd0.{\xb2O\xda\xd3'}}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(&(0x7f0000000380)={0x20071026, r1}, &(0x7f0000000400)={0x2, 0x688, 0x2, 0xd, 0x10001, 0x529}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x882, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES32=r5, @ANYBLOB="0a010101000000000000000000000000000000003300000020010000000000000000000000000002000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a000000000000000000000008001600030000004c0014007368613100"/252], 0x144}, 0x1, 0x0, 0x0, 0xc000800}, 0x9000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m5.403382021s ago: executing program 3 (id=149): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', 0xfffffffffffffffe}) 1m59.552899012s ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`', 0x1}], 0x1}, 0x0) 1m59.523919423s ago: executing program 33 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`', 0x1}], 0x1}, 0x0) 1m11.753051731s ago: executing program 2 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 1m11.012588053s ago: executing program 2 (id=426): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4061, 0xfdd}, {0x0}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f00000002c0)=""/125, 0x7d}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) 1m10.893100256s ago: executing program 2 (id=429): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) 1m10.863396767s ago: executing program 2 (id=434): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) 1m10.76462774s ago: executing program 2 (id=436): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) socketpair(0x1e, 0x2, 0x4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f00000003c0)="f35889f710", 0x5}], 0x2}, 0x4004001) recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000140)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/193, 0xc1}], 0x1, &(0x7f0000000580)=""/200, 0xc8}, 0x1) 1m10.750569661s ago: executing program 2 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 54.651833421s ago: executing program 34 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 12.772169246s ago: executing program 7 (id=634): syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011c0ab63f876a76c0cdc145e4c67"], 0x0) 12.741490527s ago: executing program 4 (id=636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) 12.740530187s ago: executing program 7 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001900000095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 12.632940211s ago: executing program 7 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000840), 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) shutdown(r0, 0x1) 12.632154491s ago: executing program 7 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0x1}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x6, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x5, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x40100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x0, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x81}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 12.499532204s ago: executing program 4 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x14040044) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0xa, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0xffff, 0x3, 0x11fb}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.443624766s ago: executing program 0 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x86a80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b, 0x0, {0x4e}}, 0x14}}, 0x4000040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) read$rfkill(r4, &(0x7f00000003c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(0x4) close(r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]}) 12.418671676s ago: executing program 0 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000000, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x1fc, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x7, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12.366310228s ago: executing program 6 (id=645): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0xffffff00, 0x4, 0xa57, 0x0, 0xec6, 0x8, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 772.094048ms ago: executing program 7 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200541f0300140003006c6f0000c7aa00000000000000000000300016802c00018028000100feffffff00000000261b879b000000000000000000000000000000000000000000000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x8851}, 0x0) 696.86731ms ago: executing program 5 (id=648): unshare(0x2a020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) 681.96019ms ago: executing program 6 (id=649): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 658.276461ms ago: executing program 5 (id=650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x82, &(0x7f0000000200)={0x6, 0x1e7, 0x1ff, 0x7}, 0x8) 631.015212ms ago: executing program 5 (id=651): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 484.033736ms ago: executing program 4 (id=652): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300091200000000000000000000000300070000000e000a"], 0x90}}, 0x0) 434.786578ms ago: executing program 0 (id=653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) 425.296197ms ago: executing program 7 (id=654): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1f, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 368.865799ms ago: executing program 4 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x86a80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b, 0x0, {0x4e}}, 0x14}}, 0x4000040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) read$rfkill(r4, &(0x7f00000003c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(0x4) close(r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]}) 350.37993ms ago: executing program 6 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x10}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8001}]}}}]}, 0x48}}, 0x0) 349.11317ms ago: executing program 5 (id=656): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0xc5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 286.864191ms ago: executing program 0 (id=657): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000880)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x68, 0x0, 0x6, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 285.554962ms ago: executing program 4 (id=658): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xd7a5, 0x4) 224.485803ms ago: executing program 4 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 224.252963ms ago: executing program 0 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 159.720825ms ago: executing program 6 (id=661): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8a5a186dd99732653be084ec3ac90c500b4d4bc2e787759227e6cee2e03a4e4b59200ac1ca91b6ae447", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 149.660246ms ago: executing program 0 (id=662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 148.698786ms ago: executing program 5 (id=663): socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) 64.875488ms ago: executing program 6 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af391b8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.24534ms ago: executing program 5 (id=666): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0xa, 0x6, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 0s ago: executing program 6 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000c00"], 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, 0x0, 0x18}, 0xc800) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xd, 0x18, 0x0, 0x0, @str='nl802154\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, 0x1403, 0x20, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) r10 = socket(0x9, 0x800, 0x6) accept4$tipc(r10, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x800) kernel console output (not intermixed with test programs): mode [ 30.895629][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.944772][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.984713][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.985973][ T4326] Cannot create hsr debugfs directory [ 30.986990][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.988277][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.989838][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.992043][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.993220][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.995014][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.045772][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.084719][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.134673][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.135961][ T4327] Cannot create hsr debugfs directory [ 31.158188][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.205630][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.254726][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.304651][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.305962][ T4335] Cannot create hsr debugfs directory [ 31.307716][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.336405][ T4339] team0: Port device team_slave_0 added [ 31.342862][ T4339] team0: Port device team_slave_1 added [ 31.369940][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.371132][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.375623][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.382752][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.383939][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.388471][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.465740][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.504735][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.544640][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.545947][ T4339] Cannot create hsr debugfs directory [ 31.587373][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.618319][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.657881][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.696175][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.738309][ T4326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.795769][ T4326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.835629][ T4326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.881339][ T4326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.918314][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.955583][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.008556][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.046602][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.095818][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.135724][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.185635][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.235129][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.298995][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.314944][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 32.315994][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 32.317029][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 32.324882][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 32.325916][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 32.335803][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.386094][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.435786][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.507005][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.523076][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.525567][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.529133][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.539524][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.541265][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.543526][ T1587] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.544733][ T1587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.547671][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.552742][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.554479][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.556994][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.558104][ T1587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.572517][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.586728][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.600068][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.601802][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.603348][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.606787][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.613046][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.615504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.617102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.621306][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.625683][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.627394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.628850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.634332][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.639212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.640939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.642601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.644250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.646537][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.647710][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.649155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.650529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.651914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.662466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.664056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.665686][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.666809][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.668185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.669698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.671222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.673418][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.679665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.681263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.682739][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.683960][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.686010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.687734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.689238][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.690390][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.691876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.701369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.703100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.705625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.707605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.709212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.710725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.715219][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.719521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.721097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.722582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.725777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.733432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.735657][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.736789][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.738337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.746826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.748400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.749905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.751576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.753118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.755515][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.756668][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.761345][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.765057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.766597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.768191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.770624][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.780339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.782333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.783926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.789700][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.791480][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.793085][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.799957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.801780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.803331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.806390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.807905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.814363][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.819338][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.821080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.822633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.824222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.827404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.828883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.830632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.836828][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.838639][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.840691][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.855179][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.859058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.860319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.861649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.863201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.865051][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.866242][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.874868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.876518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.878162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.889220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.890797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.892303][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.893465][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.895411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.897509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.899203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.901471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.903089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.906066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.909171][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.913785][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.916508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.918062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.919283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.920618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.922419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.929998][ T4331] device veth0_vlan entered promiscuous mode [ 32.932975][ T4331] device veth1_vlan entered promiscuous mode [ 32.939867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.941523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.943192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.945030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.946675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.948200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.949805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.954156][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.957257][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.962908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.964491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.968849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.970130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.978564][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.980229][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.989684][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.997764][ T4335] device veth0_vlan entered promiscuous mode [ 33.000527][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.002029][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.003510][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.006302][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.008238][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.012403][ T4331] device veth0_macvtap entered promiscuous mode [ 33.016389][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.018135][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.019758][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.030606][ T4335] device veth1_vlan entered promiscuous mode [ 33.032340][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.033850][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.037056][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.038947][ T4331] device veth1_macvtap entered promiscuous mode [ 33.049714][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.055734][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.057275][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.058699][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.059966][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.073880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.075770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.081007][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.083484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.086085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.087575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.089181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.090731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.092286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.093855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.099479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.101076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.102526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.106742][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.108647][ T4335] device veth0_macvtap entered promiscuous mode [ 33.111592][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.113002][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.114679][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.117156][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.119964][ T4327] device veth0_vlan entered promiscuous mode [ 33.122611][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.123925][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.137550][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.139020][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146226][ T4327] device veth1_vlan entered promiscuous mode [ 33.148236][ T4335] device veth1_macvtap entered promiscuous mode [ 33.151605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.153157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.157721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.159315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.165540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.167006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.168436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.176268][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.178085][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.180246][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.181431][ T4326] device veth0_vlan entered promiscuous mode [ 33.187488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.189312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.190882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.192899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.198759][ T4327] device veth0_macvtap entered promiscuous mode [ 33.201761][ T4326] device veth1_vlan entered promiscuous mode [ 33.212555][ T4327] device veth1_macvtap entered promiscuous mode [ 33.222118][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.223860][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.226490][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.229482][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.231064][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.232541][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.234089][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.239083][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.240673][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.247494][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.248914][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.250353][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251792][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.260900][ T4326] device veth0_macvtap entered promiscuous mode [ 33.267014][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.268629][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.270182][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.272415][ T4326] device veth1_macvtap entered promiscuous mode [ 33.287201][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.288490][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.292457][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.293985][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.296370][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.297938][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.311833][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.313603][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.315931][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.317640][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.319860][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.321841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.323399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.326854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.328399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.330067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.331456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.332898][ T4339] device veth0_vlan entered promiscuous mode [ 33.338546][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.340293][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.341912][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.343654][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346472][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.352389][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.356454][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.358031][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.360519][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.361106][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.363453][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.366058][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.367727][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.369351][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.371155][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.373396][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.378042][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.379707][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.381308][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.383078][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.385407][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.388523][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.390669][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.397629][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.399094][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.400634][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.402141][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.403697][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.407639][ T4326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.409052][ T4326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.410524][ T4326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.411946][ T4326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.415660][ T4339] device veth1_vlan entered promiscuous mode [ 33.423273][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.424840][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.426294][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.427705][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.439506][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.440968][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.442830][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.444375][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.447735][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.460441][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.462069][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.482369][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.483669][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.486081][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.487366][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.488957][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.499975][ T4339] device veth0_macvtap entered promiscuous mode [ 33.500853][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.502296][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.502879][ T4339] device veth1_macvtap entered promiscuous mode [ 33.507987][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.509489][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.511037][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.512524][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.560339][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.562128][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.563701][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.717722][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.720527][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.722619][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.795477][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.870717][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.890756][ T4411] loop2: detected capacity change from 0 to 4096 [ 33.894267][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.896762][ T4411] EXT4-fs: Ignoring removed i_version option [ 33.906778][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.912851][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.914518][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.943344][ T4411] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8802c029, mo2=0003] [ 33.952440][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.953756][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.956968][ T4411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.957038][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.960233][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.961846][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.962370][ T4421] loop3: detected capacity change from 0 to 512 [ 33.967979][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.971852][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.973672][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.977249][ T4421] ======================================================= [ 33.977249][ T4421] WARNING: The mand mount option has been deprecated and [ 33.977249][ T4421] and is ignored by this kernel. Remove the mand [ 33.977249][ T4421] option from the mount to silence this warning. [ 33.977249][ T4421] ======================================================= [ 33.983201][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.987702][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.993147][ T4421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.993315][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.006301][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.011065][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.012518][ T4421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.016502][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.023030][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.024466][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.026747][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.028099][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.033368][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.039578][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.050390][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.058348][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.090622][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.092049][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.093388][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.116722][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.118176][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.119571][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.227776][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 34.592890][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 34.594116][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 34.595218][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 34.596243][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 34.597250][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 34.649750][ T4431] loop4: detected capacity change from 0 to 512 [ 34.703443][ T4438] loop2: detected capacity change from 0 to 8192 [ 34.734501][ T4438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.737382][ T4438] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 34.739244][ T4438] REISERFS (device loop2): using ordered data mode [ 34.741581][ T4438] reiserfs: using flush barriers [ 34.744445][ T4431] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.745757][ T4431] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.747293][ T4438] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 34.747427][ T4438] REISERFS (device loop2): checking transaction log (loop2) [ 34.756875][ T4431] EXT4-fs error (device loop4): __ext4_fill_super:5465: inode #2: comm syz.4.7: iget: special inode unallocated [ 34.760396][ T4431] EXT4-fs (loop4): Remounting filesystem read-only [ 34.761716][ T4431] EXT4-fs (loop4): get root inode failed [ 34.761842][ T4438] REISERFS (device loop2): Using r5 hash to sort names [ 34.762607][ T4431] EXT4-fs (loop4): mount failed [ 34.767959][ T4438] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 34.773898][ T4438] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 34.833220][ T4438] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 34.836197][ T4438] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 34.845423][ T4438] overlayfs: workdir and upperdir must be separate subtrees [ 34.867221][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 35.120608][ T4448] loop4: detected capacity change from 0 to 32768 [ 35.128967][ T4448] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 35.128967][ T4448] [ 35.131235][ T4448] ERROR: (device loop4): remounting filesystem as read-only [ 35.143019][ T4451] loop2: detected capacity change from 0 to 512 [ 35.297565][ T4451] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 35.306235][ T4435] loop0: detected capacity change from 0 to 131072 [ 35.340908][ T4320] I/O error, dev loop0, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.374453][ T4467] loop2: detected capacity change from 0 to 256 [ 35.393370][ T4467] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 35.424443][ T4335] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 35.618797][ T4471] Injecting memory failure for pfn 0x13a3c7 at process virtual address 0x20ffe000 [ 35.623892][ T4471] Memory failure: 0x13a3c7: recovery action for clean LRU page: Recovered [ 35.626398][ T4471] Injecting memory failure for pfn 0x13a3c8 at process virtual address 0x20fff000 [ 35.627921][ T4471] Memory failure: 0x13a3c8: recovery action for clean LRU page: Recovered [ 35.669813][ T4482] loop2: detected capacity change from 0 to 256 [ 35.674247][ T4482] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.681246][ T4482] Zero length message leads to an empty skb [ 35.805890][ T4490] netlink: 'syz.4.22': attribute type 11 has an invalid length. [ 35.807372][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 35.878621][ T4495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 35.882255][ T4495] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 35.915191][ T4501] loop4: detected capacity change from 0 to 1024 [ 35.916646][ T4501] EXT4-fs: Ignoring removed orlov option [ 37.573188][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 37.574250][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.575817][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.576758][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 37.577767][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 37.645055][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.648884][ T4501] capability: warning: `syz.4.26' uses 32-bit capabilities (legacy support in use) [ 37.698088][ T4514] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 37.946786][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 37.984884][ T4530] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.994888][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.010517][ T4532] EXT4-fs (loop3): shut down requested (1) [ 38.011650][ T4532] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 38.035917][ T4326] EXT4-fs (loop3): unmounting filesystem. [ 38.084956][ T4536] ntfs: (device loop3): parse_options(): Unrecognized mount option ûOnˆ‹OªkdænÁ÷¯ [ 38.084956][ T4536] Æ ÞÜÍ°¸‹¿çÁ4–4·6 òº¦I¿ËðßÙYÃÒ. [ 38.087567][ T4536] ntfs: (device loop3): parse_options(): Unrecognized mount option 0.ÄõZdɶ‹WFy¸@ N¨7®tó6é„øƒ ú5£èÒúØÓاbšÞͨY!Hzh ?  ½rl. [ 38.131935][ T4521] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.31 (4521) [ 38.142256][ T4521] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 38.145029][ T4521] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 38.146755][ T4521] BTRFS info (device loop1): turning off barriers [ 38.152170][ T4521] BTRFS info (device loop1): turning on async discard [ 38.156940][ T4521] BTRFS info (device loop1): doing ref verification [ 38.158114][ T4521] BTRFS info (device loop1): using free space tree [ 38.217953][ T4514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.233701][ T4514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.338595][ T4558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.37 (4558) [ 38.338629][ T4521] BTRFS info (device loop1): enabling ssd optimizations [ 38.355842][ T4558] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.373825][ T4558] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 38.379696][ T4558] BTRFS info (device loop4): allowing degraded mounts [ 38.380835][ T4558] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 38.387866][ T4558] BTRFS info (device loop4): force zstd compression, level 3 [ 38.418822][ T4558] BTRFS info (device loop4): turning on sync discard [ 38.422077][ T4558] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 38.427565][ T4558] BTRFS info (device loop4): force lzo compression, level 0 [ 38.428795][ T4558] BTRFS info (device loop4): max_inline at 0 [ 38.429936][ T4558] BTRFS info (device loop4): turning on async discard [ 38.447138][ T4558] BTRFS error (device loop4): unrecognized mount option 'pcr=00000000000000000057' [ 38.458271][ T4558] BTRFS error (device loop4): open_ctree failed: -22 [ 38.493125][ T4327] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 38.566731][ T4318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4318) [ 38.995492][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 39.102436][ T4610] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 39.110675][ T4612] FAT-fs (loop4): Unrecognized mount option "shortOame=lower" or missing value [ 39.222055][ T4625] FAULT_INJECTION: forcing a failure. [ 39.222055][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 39.224200][ T4625] CPU: 1 PID: 4625 Comm: syz.1.55 Not tainted syzkaller #0 [ 39.225341][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.226999][ T4625] Call trace: [ 39.227591][ T4625] dump_backtrace+0x1c0/0x1ec [ 39.228437][ T4625] show_stack+0x2c/0x3c [ 39.229152][ T4625] __dump_stack+0x30/0x40 [ 39.229893][ T4625] dump_stack_lvl+0xf4/0x15c [ 39.230695][ T4625] dump_stack+0x1c/0x5c [ 39.231450][ T4625] should_fail_ex+0x3c0/0x518 [ 39.232304][ T4625] __should_failslab+0xc0/0x120 [ 39.233167][ T4625] should_failslab+0x10/0x28 [ 39.233972][ T4625] kmem_cache_alloc+0x88/0x308 [ 39.234779][ T4625] skb_clone+0x190/0x304 [ 39.235481][ T4625] __skb_tstamp_tx+0x130/0x7a4 [ 39.236308][ T4625] skb_tstamp_tx+0x50/0x60 [ 39.237097][ T4625] tun_net_xmit+0x88c/0x1320 [ 39.237860][ T4625] dev_hard_start_xmit+0x234/0x8cc [ 39.238747][ T4625] sch_direct_xmit+0x210/0x474 [ 39.239597][ T4625] __dev_queue_xmit+0x13bc/0x3118 [ 39.240443][ T4625] ip6_finish_output2+0xd28/0x1840 [ 39.241355][ T4625] ip6_finish_output+0x594/0x92c [ 39.242152][ T4625] ip6_output+0x274/0x500 [ 39.242894][ T4625] ip6_local_out+0x120/0x15c [ 39.243706][ T4625] ip6_send_skb+0x1a0/0x4e4 [ 39.244491][ T4625] ip6_push_pending_frames+0xd0/0x118 [ 39.245432][ T4625] rawv6_push_pending_frames+0x59c/0x75c [ 39.246449][ T4625] rawv6_sendmsg+0xebc/0x1314 [ 39.247278][ T4625] inet_sendmsg+0x154/0x284 [ 39.248103][ T4625] ____sys_sendmsg+0x5c8/0x938 [ 39.248957][ T4625] __sys_sendmsg+0x288/0x374 [ 39.249754][ T4625] __arm64_sys_sendmsg+0x80/0x94 [ 39.250616][ T4625] invoke_syscall+0x98/0x2b4 [ 39.251449][ T4625] el0_svc_common+0x138/0x258 [ 39.252322][ T4625] do_el0_svc+0x58/0x130 [ 39.253025][ T4625] el0_svc+0x58/0x128 [ 39.253739][ T4625] el0t_64_sync_handler+0x84/0xf0 [ 39.254571][ T4625] el0t_64_sync+0x18c/0x190 [ 39.377037][ T4634] netlink: 'syz.1.57': attribute type 2 has an invalid length. [ 39.379469][ T4634] netlink: 14 bytes leftover after parsing attributes in process `syz.1.57'. [ 39.524844][ T4636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.57'. [ 39.583490][ T4641] set_capacity_and_notify: 8 callbacks suppressed [ 39.583499][ T4641] loop0: detected capacity change from 0 to 512 [ 39.674237][ T4646] loop0: detected capacity change from 0 to 256 [ 39.709457][ T4623] loop2: detected capacity change from 0 to 131072 [ 39.712413][ T4623] F2FS-fs (loop2): invalid crc value [ 39.721796][ T4623] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.732171][ T4623] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 39.734102][ T4623] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.786035][ T4333] Bluetooth: Unknown LE signaling command 0x90 [ 39.787029][ T4333] Bluetooth: Wrong link type (-22) [ 39.800204][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 39.801226][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.802258][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 39.803266][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.804262][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 39.909525][ T4659] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 40.289627][ T4677] loop4: detected capacity change from 0 to 32768 [ 40.299023][ T4677] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.69 (4677) [ 40.307114][ T4677] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 40.308810][ T4677] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 40.311647][ T4677] BTRFS info (device loop4): turning off barriers [ 40.323319][ T4677] BTRFS info (device loop4): turning on async discard [ 40.324512][ T4677] BTRFS info (device loop4): doing ref verification [ 40.325547][ T4677] BTRFS info (device loop4): using free space tree [ 40.347272][ T4677] BTRFS info (device loop4): enabling ssd optimizations [ 40.383077][ T4339] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 40.426701][ T4696] tmpfs: Unknown parameter 'mpol½locak?‘²dWÖŸ®¾*f l:2-:N' [ 40.444968][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.71'. [ 42.023401][ T4337] Bluetooth: hci0: command 0x0c1a tx timeout [ 42.025130][ T4652] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 42.057487][ T4731] loop1: detected capacity change from 0 to 512 [ 42.067105][ T4731] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.082023][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #3: comm syz.1.82: corrupted inode contents [ 42.084992][ T4731] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #3: comm syz.1.82: mark_inode_dirty error [ 42.090114][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #3: comm syz.1.82: corrupted inode contents [ 42.092879][ T4731] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.82: mark_inode_dirty error [ 42.096286][ T4731] Quota error (device loop1): write_blk: dquota write failed [ 42.098277][ T4731] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 42.100244][ T4731] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.82: Failed to acquire dquot type 0 [ 42.103906][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 42.106578][ T4731] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.82: mark_inode_dirty error [ 42.109130][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 42.111430][ T4731] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.82: mark_inode_dirty error [ 42.113597][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 42.116293][ T4731] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 42.118081][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 42.124377][ T4731] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.82: mark_inode_dirty error [ 42.126587][ T4731] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 42.129112][ T4731] EXT4-fs (loop1): 1 truncate cleaned up [ 42.130460][ T4731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.725070][ T4737] FAULT_INJECTION: forcing a failure. [ 42.725070][ T4737] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.727476][ T4737] CPU: 0 PID: 4737 Comm: syz.4.84 Not tainted syzkaller #0 [ 42.728754][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.730572][ T4737] Call trace: [ 42.731138][ T4737] dump_backtrace+0x1c0/0x1ec [ 42.731965][ T4737] show_stack+0x2c/0x3c [ 42.732725][ T4737] __dump_stack+0x30/0x40 [ 42.733484][ T4737] dump_stack_lvl+0xf4/0x15c [ 42.734281][ T4737] dump_stack+0x1c/0x5c [ 42.734974][ T4737] should_fail_ex+0x3c0/0x518 [ 42.735765][ T4737] should_fail+0x14/0x24 [ 42.736470][ T4737] should_fail_usercopy+0x20/0x30 [ 42.737354][ T4737] kstrtouint_from_user+0xe0/0x264 [ 42.738213][ T4737] proc_fail_nth_write+0x9c/0x234 [ 42.739063][ T4737] vfs_write+0x2a4/0x7f0 [ 42.739828][ T4737] ksys_write+0x12c/0x224 [ 42.740591][ T4737] __arm64_sys_write+0x7c/0x90 [ 42.741447][ T4737] invoke_syscall+0x98/0x2b4 [ 42.742278][ T4737] el0_svc_common+0x138/0x258 [ 42.743074][ T4737] do_el0_svc+0x58/0x130 [ 42.743782][ T4737] el0_svc+0x58/0x128 [ 42.744485][ T4737] el0t_64_sync_handler+0x84/0xf0 [ 42.745379][ T4737] el0t_64_sync+0x18c/0x190 [ 42.995675][ T4652] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.999928][ T4652] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 43.001327][ T4652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.002325][ T4652] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.004066][ T4652] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 43.005210][ T4652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.006336][ T4652] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.009656][ T4652] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 43.010844][ T4652] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 43.011963][ T4652] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 43.013335][ T4652] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 43.051921][ T4316] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4316) [ 43.072198][ T4748] loop0: detected capacity change from 0 to 512 [ 43.103504][ T4755] FAULT_INJECTION: forcing a failure. [ 43.103504][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 43.107676][ T4755] CPU: 1 PID: 4755 Comm: syz.2.90 Not tainted syzkaller #0 [ 43.108846][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.110669][ T4755] Call trace: [ 43.111265][ T4755] dump_backtrace+0x1c0/0x1ec [ 43.112178][ T4755] show_stack+0x2c/0x3c [ 43.112923][ T4755] __dump_stack+0x30/0x40 [ 43.113282][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #3: comm syz.0.87: corrupted inode contents [ 43.113663][ T4755] dump_stack_lvl+0xf4/0x15c [ 43.113688][ T4755] dump_stack+0x1c/0x5c [ 43.113696][ T4755] should_fail_ex+0x3c0/0x518 [ 43.113703][ T4755] __should_failslab+0xc0/0x120 [ 43.113712][ T4755] should_failslab+0x10/0x28 [ 43.118400][ T4748] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #3: comm syz.0.87: mark_inode_dirty error [ 43.118708][ T4755] __kmem_cache_alloc_node+0x7c/0x314 [ 43.120257][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #3: comm syz.0.87: corrupted inode contents [ 43.121431][ T4755] __kmalloc+0xd8/0x178 [ 43.123168][ T4748] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.87: mark_inode_dirty error [ 43.124439][ T4755] sk_prot_alloc+0xc4/0x1ec [ 43.124457][ T4755] sk_alloc+0x44/0x390 [ 43.124464][ T4755] bpf_prog_test_run_skb+0x24c/0xef0 [ 43.124470][ T4755] bpf_prog_test_run+0x2dc/0x360 [ 43.124476][ T4755] __sys_bpf+0x504/0x660 [ 43.124482][ T4755] __arm64_sys_bpf+0x80/0x98 [ 43.124489][ T4755] invoke_syscall+0x98/0x2b4 [ 43.124496][ T4755] el0_svc_common+0x138/0x258 [ 43.124502][ T4755] do_el0_svc+0x58/0x130 [ 43.124508][ T4755] el0_svc+0x58/0x128 [ 43.124512][ T4755] el0t_64_sync_handler+0x84/0xf0 [ 43.124517][ T4755] el0t_64_sync+0x18c/0x190 [ 43.184530][ T4748] Quota error (device loop0): write_blk: dquota write failed [ 43.185832][ T4748] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 43.188060][ T4748] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.87: Failed to acquire dquot type 0 [ 43.193197][ T4760] loop4: detected capacity change from 0 to 2048 [ 43.198035][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.87: corrupted inode contents [ 43.202066][ T4748] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.87: mark_inode_dirty error [ 43.203994][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.87: corrupted inode contents [ 43.206175][ T4748] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.87: mark_inode_dirty error [ 43.217590][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.87: corrupted inode contents [ 43.219808][ T4748] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 43.223529][ T4760] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 43.223532][ T4748] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.87: corrupted inode contents [ 43.225264][ T4748] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.87: mark_inode_dirty error [ 43.228788][ T4748] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 43.232387][ T4748] EXT4-fs (loop0): 1 truncate cleaned up [ 43.233322][ T4748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.238613][ T4748] FAULT_INJECTION: forcing a failure. [ 43.238613][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 43.240886][ T4748] CPU: 1 PID: 4748 Comm: syz.0.87 Not tainted syzkaller #0 [ 43.242042][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.243835][ T4748] Call trace: [ 43.244398][ T4748] dump_backtrace+0x1c0/0x1ec [ 43.245221][ T4748] show_stack+0x2c/0x3c [ 43.245957][ T4748] __dump_stack+0x30/0x40 [ 43.246734][ T4748] dump_stack_lvl+0xf4/0x15c [ 43.247527][ T4748] dump_stack+0x1c/0x5c [ 43.248257][ T4748] should_fail_ex+0x3c0/0x518 [ 43.249134][ T4748] __should_failslab+0xc0/0x120 [ 43.250033][ T4748] should_failslab+0x10/0x28 [ 43.250821][ T4748] __kmem_cache_alloc_node+0x7c/0x314 [ 43.251770][ T4748] __kmalloc+0xd8/0x178 [ 43.252495][ T4748] qtree_write_dquot+0xd8/0x4f0 [ 43.253364][ T4748] v2_write_dquot+0xf0/0x180 [ 43.254181][ T4748] dquot_commit+0x128/0x1c4 [ 43.255005][ T4748] ext4_write_dquot+0x1b4/0x31c [ 43.255959][ T4748] ext4_mark_dquot_dirty+0xe8/0x140 [ 43.256870][ T4748] mark_all_dquot_dirty+0x108/0x424 [ 43.257789][ T4748] __dquot_alloc_space+0x560/0xce0 [ 43.258697][ T4748] ext4_mb_new_blocks+0xd38/0x4254 [ 43.259630][ T4748] ext4_ext_map_blocks+0x1394/0x56f4 [ 43.260531][ T4748] ext4_map_blocks+0x860/0x1778 [ 43.261368][ T4748] _ext4_get_block+0x19c/0x4d8 [ 43.262167][ T4748] ext4_get_block+0x4c/0x60 [ 43.263016][ T4748] ext4_block_write_begin+0x50c/0x10e4 [ 43.263982][ T4748] ext4_write_begin+0x5f4/0x131c [ 43.264841][ T4748] generic_perform_write+0x234/0x4f4 [ 43.265784][ T4748] ext4_buffered_write_iter+0x2c4/0x528 [ 43.266819][ T4748] ext4_file_write_iter+0x18c/0x1574 [ 43.267778][ T4748] vfs_write+0x3ec/0x7f0 [ 43.268506][ T4748] ksys_write+0x12c/0x224 [ 43.269278][ T4748] __arm64_sys_write+0x7c/0x90 [ 43.270172][ T4748] invoke_syscall+0x98/0x2b4 [ 43.270960][ T4748] el0_svc_common+0x138/0x258 [ 43.271806][ T4748] do_el0_svc+0x58/0x130 [ 43.272545][ T4748] el0_svc+0x58/0x128 [ 43.273188][ T4748] el0t_64_sync_handler+0x84/0xf0 [ 43.274039][ T4748] el0t_64_sync+0x18c/0x190 [ 43.274881][ C1] vkms_vblank_simulate: vblank timer overrun [ 43.278360][ T4748] EXT4-fs error (device loop0): ext4_write_dquot:6821: comm syz.0.87: Failed to commit dquot type 0 [ 43.308398][ T4766] FAULT_INJECTION: forcing a failure. [ 43.308398][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.310612][ T4766] CPU: 0 PID: 4766 Comm: syz.2.94 Not tainted syzkaller #0 [ 43.311900][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.313597][ T4766] Call trace: [ 43.314123][ T4766] dump_backtrace+0x1c0/0x1ec [ 43.314942][ T4766] show_stack+0x2c/0x3c [ 43.315658][ T4766] __dump_stack+0x30/0x40 [ 43.316413][ T4766] dump_stack_lvl+0xf4/0x15c [ 43.317211][ T4766] dump_stack+0x1c/0x5c [ 43.317915][ T4766] should_fail_ex+0x3c0/0x518 [ 43.318751][ T4766] should_fail+0x14/0x24 [ 43.319447][ T4766] should_fail_usercopy+0x20/0x30 [ 43.320313][ T4766] copyin+0x2c/0x154 [ 43.320991][ T4766] _copy_from_iter+0x400/0xf6c [ 43.321777][ T4766] netlink_sendmsg+0x5ec/0x9c0 [ 43.322605][ T4766] ____sys_sendmsg+0x5c8/0x938 [ 43.323452][ T4766] __sys_sendmsg+0x288/0x374 [ 43.324234][ T4766] __arm64_sys_sendmsg+0x80/0x94 [ 43.325120][ T4766] invoke_syscall+0x98/0x2b4 [ 43.325869][ T4766] el0_svc_common+0x138/0x258 [ 43.326677][ T4766] do_el0_svc+0x58/0x130 [ 43.327378][ T4766] el0_svc+0x58/0x128 [ 43.328051][ T4766] el0t_64_sync_handler+0x84/0xf0 [ 43.328869][ T4766] el0t_64_sync+0x18c/0x190 [ 43.337084][ T4316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.342437][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 43.414029][ T4774] loop2: detected capacity change from 0 to 16 [ 43.419082][ T4774] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.487893][ T4735] EXT4-fs (loop1): unmounting filesystem. [ 43.658402][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.663359][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.664870][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.666690][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.668083][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.669366][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.693396][ T4772] loop3: detected capacity change from 0 to 40427 [ 43.702928][ T4772] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 43.711593][ T4772] F2FS-fs (loop3): invalid crc value [ 43.727412][ T4772] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.751930][ T4772] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.810866][ T4418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.884902][ T4418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.940002][ T4804] loop3: detected capacity change from 0 to 64 [ 43.971409][ T4804] hfs: unable to load codepage "cp775 umask=0000000000777æƒ6¸charset=koi8-ru" [ 43.973185][ T4804] hfs: unable to parse mount options [ 43.985152][ T4418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.989320][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 43.994764][ T4316] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.100923][ T4418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.142819][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.144093][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.145633][ T4785] device bridge_slave_0 entered promiscuous mode [ 44.152267][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.153434][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.155105][ T4785] device bridge_slave_1 entered promiscuous mode [ 44.169904][ T4810] XFS (loop2): Mounting V5 Filesystem [ 44.195762][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.201977][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.205654][ T4810] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 44.215735][ T4810] XFS (loop2): Starting recovery (logdev: internal) [ 44.233243][ T4810] XFS (loop2): Ending recovery (logdev: internal) [ 44.240032][ T4785] team0: Port device team_slave_0 added [ 44.241857][ T4785] team0: Port device team_slave_1 added [ 44.246889][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 44.270475][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.271751][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.283929][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.299660][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.305259][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.311753][ T4826] process 'syz.2.108' launched './file0' with NULL argv: empty string added [ 44.316448][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.405013][ T4838] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.408713][ T4785] device hsr_slave_0 entered promiscuous mode [ 44.432630][ T4841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 44.438233][ T4838] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 44.443312][ T4841] hpfs: filesystem error: improperly stopped [ 44.446980][ T4841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 44.449691][ T4838] EXT4-fs (loop4): Remounting filesystem read-only [ 44.450030][ T4841] hpfs: You really don't want any checks? You are crazy... [ 44.452384][ T4838] Quota error (device loop4): write_blk: dquota write failed [ 44.452467][ T4841] hpfs: hpfs_map_sector(): read error [ 44.454433][ T4841] hpfs: code page support is disabled [ 44.454815][ T4838] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 44.459367][ T4838] Quota error (device loop4): write_blk: dquota write failed [ 44.462257][ T4838] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 44.464313][ T4838] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.112: Failed to acquire dquot type 1 [ 44.466594][ T4838] EXT4-fs (loop4): Remounting filesystem read-only [ 44.466611][ T4841] hpfs: hpfs_map_4sectors(): unaligned read [ 44.467991][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 44.469874][ T4841] hpfs: hpfs_map_4sectors(): unaligned read [ 44.472470][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.476174][ T4785] device hsr_slave_1 entered promiscuous mode [ 44.485438][ T4841] hpfs: filesystem error: unable to find root dir [ 44.503820][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.505114][ T4785] Cannot create hsr debugfs directory [ 44.526583][ T4337] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 44.562504][ T4853] FAULT_INJECTION: forcing a failure. [ 44.562504][ T4853] name failslab, interval 1, probability 0, space 0, times 0 [ 44.564819][ T4853] CPU: 1 PID: 4853 Comm: syz.0.115 Not tainted syzkaller #0 [ 44.566069][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.567847][ T4853] Call trace: [ 44.568418][ T4853] dump_backtrace+0x1c0/0x1ec [ 44.569262][ T4853] show_stack+0x2c/0x3c [ 44.570005][ T4853] __dump_stack+0x30/0x40 [ 44.570776][ T4853] dump_stack_lvl+0xf4/0x15c [ 44.571576][ T4853] dump_stack+0x1c/0x5c [ 44.572277][ T4853] should_fail_ex+0x3c0/0x518 [ 44.573037][ T4853] __should_failslab+0xc0/0x120 [ 44.573930][ T4853] should_failslab+0x10/0x28 [ 44.574698][ T4853] slab_pre_alloc_hook+0x6c/0x318 [ 44.575576][ T4853] kmem_cache_alloc_lru+0x60/0x280 [ 44.576429][ T4853] __d_alloc+0x44/0x684 [ 44.577182][ T4853] d_alloc_pseudo+0x28/0x8c [ 44.577915][ T4853] alloc_file_pseudo+0xd8/0x1f4 [ 44.578715][ T4853] __shmem_file_setup+0x19c/0x264 [ 44.579565][ T4853] shmem_file_setup+0x40/0x54 [ 44.580328][ T4853] __arm64_sys_memfd_create+0x2d8/0x45c [ 44.581287][ T4853] invoke_syscall+0x98/0x2b4 [ 44.582084][ T4853] el0_svc_common+0x138/0x258 [ 44.582841][ T4853] do_el0_svc+0x58/0x130 [ 44.583558][ T4853] el0_svc+0x58/0x128 [ 44.584269][ T4853] el0t_64_sync_handler+0x84/0xf0 [ 44.585188][ T4853] el0t_64_sync+0x18c/0x190 [ 44.696693][ T4860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.116'. [ 44.705057][ T4865] netlink: 'syz.0.116': attribute type 12 has an invalid length. [ 44.707811][ T4865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.116'. [ 44.725061][ T4841] device syzkaller0 entered promiscuous mode [ 44.894029][ T4868] FAULT_INJECTION: forcing a failure. [ 44.894029][ T4868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.896276][ T4868] CPU: 0 PID: 4868 Comm: syz.0.117 Not tainted syzkaller #0 [ 44.897523][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.899381][ T4868] Call trace: [ 44.900021][ T4868] dump_backtrace+0x1c0/0x1ec [ 44.900869][ T4868] show_stack+0x2c/0x3c [ 44.901570][ T4868] __dump_stack+0x30/0x40 [ 44.902307][ T4868] dump_stack_lvl+0xf4/0x15c [ 44.903135][ T4868] dump_stack+0x1c/0x5c [ 44.903854][ T4868] should_fail_ex+0x3c0/0x518 [ 44.904767][ T4868] should_fail+0x14/0x24 [ 44.905531][ T4868] should_fail_usercopy+0x20/0x30 [ 44.906442][ T4868] kstrtouint_from_user+0xe0/0x264 [ 44.907318][ T4868] proc_fail_nth_write+0x9c/0x234 [ 44.908174][ T4868] vfs_write+0x2a4/0x7f0 [ 44.908876][ T4868] ksys_write+0x12c/0x224 [ 44.909692][ T4868] __arm64_sys_write+0x7c/0x90 [ 44.910465][ T4868] invoke_syscall+0x98/0x2b4 [ 44.911296][ T4868] el0_svc_common+0x138/0x258 [ 44.912102][ T4868] do_el0_svc+0x58/0x130 [ 44.912844][ T4868] el0_svc+0x58/0x128 [ 44.913571][ T4868] el0t_64_sync_handler+0x84/0xf0 [ 44.914434][ T4868] el0t_64_sync+0x18c/0x190 [ 44.934890][ T4335] XFS (loop2): Unmounting Filesystem [ 45.010385][ T4877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 45.124888][ T4887] FAULT_INJECTION: forcing a failure. [ 45.124888][ T4887] name failslab, interval 1, probability 0, space 0, times 0 [ 45.127047][ T4887] CPU: 1 PID: 4887 Comm: syz.0.120 Not tainted syzkaller #0 [ 45.128284][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.130054][ T4887] Call trace: [ 45.130569][ T4887] dump_backtrace+0x1c0/0x1ec [ 45.131388][ T4887] show_stack+0x2c/0x3c [ 45.132129][ T4887] __dump_stack+0x30/0x40 [ 45.132895][ T4887] dump_stack_lvl+0xf4/0x15c [ 45.133674][ T4887] dump_stack+0x1c/0x5c [ 45.134395][ T4887] should_fail_ex+0x3c0/0x518 [ 45.135196][ T4887] __should_failslab+0xc0/0x120 [ 45.136006][ T4887] should_failslab+0x10/0x28 [ 45.136813][ T4887] slab_pre_alloc_hook+0x6c/0x318 [ 45.137671][ T4887] kmem_cache_alloc_lru+0x60/0x280 [ 45.138521][ T4887] __d_alloc+0x44/0x684 [ 45.139252][ T4887] d_alloc_pseudo+0x28/0x8c [ 45.140046][ T4887] alloc_file_pseudo+0xd8/0x1f4 [ 45.140882][ T4887] __shmem_file_setup+0x19c/0x264 [ 45.141751][ T4887] shmem_file_setup+0x40/0x54 [ 45.142559][ T4887] __arm64_sys_memfd_create+0x2d8/0x45c [ 45.143564][ T4887] invoke_syscall+0x98/0x2b4 [ 45.144322][ T4887] el0_svc_common+0x138/0x258 [ 45.145079][ T4887] do_el0_svc+0x58/0x130 [ 45.145764][ T4887] el0_svc+0x58/0x128 [ 45.146449][ T4887] el0t_64_sync_handler+0x84/0xf0 [ 45.147300][ T4887] el0t_64_sync+0x18c/0x190 [ 45.187563][ T4337] Bluetooth: hci3: command 0x0c1a tx timeout [ 45.188626][ T4337] Bluetooth: hci1: command 0x0c1a tx timeout [ 45.450028][ T4896] tmpfs: Bad value for 'mpol' [ 45.882512][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 47.414137][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 47.415142][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 47.961211][ T4903] set_capacity_and_notify: 3 callbacks suppressed [ 47.961220][ T4903] loop0: detected capacity change from 0 to 40427 [ 47.972337][ T4903] F2FS-fs (loop0): invalid crc value [ 47.975355][ T4903] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.992035][ T4903] F2FS-fs (loop0): Start checkpoint disabled! [ 48.002154][ T4903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 48.008739][ T4903] syz.0.123: attempt to access beyond end of device [ 48.008739][ T4903] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.097381][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 50.319066][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 52.542714][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 56.497661][ T4931] random: crng reseeded on system resumption [ 56.508055][ T4785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.556719][ T4785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.624037][ T4920] loop2: detected capacity change from 0 to 32768 [ 56.641755][ T4920] (syz.2.124,4920,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3000000, computed 0x638c8976. Applying ECC. [ 56.644030][ T4920] (syz.2.124,4920,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb3000000, computed 0x316cf323 [ 56.647421][ T4920] (syz.2.124,4920,0):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 18 [ 56.650150][ T4920] (syz.2.124,4920,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 56.652183][ T4920] (syz.2.124,4920,0):ocfs2_init_global_system_inodes:448 ERROR: status = -5 [ 56.653647][ T4920] (syz.2.124,4920,0):ocfs2_init_global_system_inodes:472 ERROR: status = -5 [ 56.655170][ T4920] (syz.2.124,4920,0):ocfs2_initialize_super:2255 ERROR: status = -5 [ 56.656594][ T4920] (syz.2.124,4920,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 56.748950][ T4939] loop3: detected capacity change from 0 to 40427 [ 56.752395][ T4939] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 56.753642][ T4939] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.755290][ T4939] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 56.765254][ T4927] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.782677][ T4938] loop0: detected capacity change from 0 to 32768 [ 56.785289][ T4785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.791396][ T4938] (syz.0.127,4938,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value [ 56.793495][ T4938] (syz.0.127,4938,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 56.820002][ T4785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.879395][ T4943] loop2: detected capacity change from 0 to 512 [ 56.897314][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.906981][ T4943] EXT4-fs error (device loop2): ext4_group_add:1746: inode #7: comm syz.2.132: iget: checksum invalid [ 56.921453][ T4943] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode [ 56.972676][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 57.144448][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.228554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.230204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.233694][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.248942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.250659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.252252][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.253518][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.258523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.268402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.270286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.275867][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.277117][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.278825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.309457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.313144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.315414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.317196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.334654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.418997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.421610][ T4972] loop2: detected capacity change from 0 to 1024 [ 57.423196][ T4972] ext4: Unknown parameter 'dont_hash' [ 57.436058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.450284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.454318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.464482][ T4971] Injecting memory failure for pfn 0x13a90d at process virtual address 0x20001000 [ 57.465338][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.466372][ T4971] Memory failure: 0x13a90d: recovery action for dirty LRU page: Recovered [ 57.469501][ T4971] Injecting memory failure for pfn 0x13a910 at process virtual address 0x20002000 [ 57.480360][ T4927] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.495366][ T4971] Memory failure: 0x13a910: recovery action for dirty LRU page: Recovered [ 57.541953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.561880][ T4987] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 57.681691][ T4995] loop2: detected capacity change from 0 to 512 [ 57.707605][ T4995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.711904][ T4995] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 57.714524][ T4995] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 57.716068][ T4995] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.142: Failed to acquire dquot type 0 [ 57.774025][ T4979] loop3: detected capacity change from 0 to 40427 [ 57.784013][ T4979] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 57.787825][ T4979] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 57.798217][ T4979] F2FS-fs (loop3): invalid crc value [ 57.809420][ T4979] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.828217][ T4979] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 57.829448][ T4979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 58.128441][ T4979] syz.3.140: attempt to access beyond end of device [ 58.128441][ T4979] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 58.140133][ T4979] syz.3.140: attempt to access beyond end of device [ 58.140133][ T4979] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 58.315653][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.317195][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.321397][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.416874][ T5018] loop0: detected capacity change from 0 to 128 [ 58.427076][ T4326] syz-executor: attempt to access beyond end of device [ 58.427076][ T4326] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.447413][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.450506][ T5018] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 58.720208][ T5037] loop3: detected capacity change from 0 to 1024 [ 58.754950][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 58.774455][ T4418] device hsr_slave_0 left promiscuous mode [ 58.776855][ T5037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.807136][ T5043] loop2: detected capacity change from 0 to 512 [ 58.817424][ T4418] device hsr_slave_1 left promiscuous mode [ 58.822131][ T5037] cgroup: Invalid name [ 58.824434][ T5043] EXT4-fs: Ignoring removed i_version option [ 58.826968][ T5037] capability: warning: `syz.3.147' uses deprecated v2 capabilities in a way that may be insecure [ 58.832992][ T5043] EXT4-fs: Ignoring removed nobh option [ 58.837133][ T5043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.843488][ T5037] netlink: 84 bytes leftover after parsing attributes in process `syz.3.147'. [ 58.855435][ T5043] EXT4-fs (loop2): 1 truncate cleaned up [ 58.857837][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.860511][ T5037] overlayfs: failed to clone lowerpath [ 58.885661][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.887047][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.890035][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.891415][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.893467][ T4418] device bridge_slave_1 left promiscuous mode [ 58.897581][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.932496][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 58.949160][ T4418] device bridge_slave_0 left promiscuous mode [ 58.950344][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.075312][ T4418] device veth1_macvtap left promiscuous mode [ 59.076500][ T4418] device veth0_macvtap left promiscuous mode [ 59.077638][ T4418] device veth1_vlan left promiscuous mode [ 59.078802][ T4418] device veth0_vlan left promiscuous mode [ 59.319251][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 61.813650][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 61.994924][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 62.164641][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.389129][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.908702][ T4418] bond0 (unregistering): Released all slaves [ 63.917490][ T4948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 32: padding at end of block bitmap is not set [ 64.268085][ T5068] netlink: 'syz.4.157': attribute type 7 has an invalid length. [ 64.288136][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.289726][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.369013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.370846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.372466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.373892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.378176][ T4785] device veth0_vlan entered promiscuous mode [ 64.383040][ T4785] device veth1_vlan entered promiscuous mode [ 64.401867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.403421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.404875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.406878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.414243][ T4785] device veth0_macvtap entered promiscuous mode [ 64.420883][ T4785] device veth1_macvtap entered promiscuous mode [ 64.427501][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.434594][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.436351][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.439450][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.442681][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.444505][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.446066][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.451601][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.469251][ T5098] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 64.478252][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.484798][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.486410][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.488219][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.489677][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.491349][ T5098] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 64.494077][ T5098] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 64.497453][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.499137][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.500804][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.502618][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.504299][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.508616][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.510239][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.512031][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.522495][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.534546][ T5104] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 64.541173][ T5098] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 64.542588][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.544385][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.546431][ T5104] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 64.547898][ T5098] netlink: 'syz.2.167': attribute type 29 has an invalid length. [ 64.558514][ T4785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.563151][ T4785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.564638][ T4785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.566165][ T4785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.580036][ T5104] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 64.581842][ T5104] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 64.663206][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.664503][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.670550][ T5112] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.171'. [ 64.671984][ T5112] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 64.674405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.702738][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.703576][ T5044] EXT4-fs (loop3): unmounting filesystem. [ 64.704127][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.708449][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.958719][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.960935][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.962565][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.972918][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.976175][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.977539][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.006726][ T5152] netlink: 128 bytes leftover after parsing attributes in process `syz.0.185'. [ 65.008961][ T5152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.169753][ T5173] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.190'. [ 65.509468][ T5199] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.200'. [ 65.534520][ T4418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.583096][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 65.653941][ T4418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.760544][ T5128] loop5: detected capacity change from 0 to 131072 [ 65.774151][ T5128] F2FS-fs (loop5): invalid crc value [ 65.807179][ T5128] F2FS-fs (loop5): Found nat_bits in checkpoint [ 65.820218][ T5128] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 65.834444][ T5128] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 65.943977][ T4418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.967742][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976182][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.977768][ T5143] device bridge_slave_0 entered promiscuous mode [ 66.101169][ T4418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.120119][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.121437][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.123131][ T5143] device bridge_slave_1 entered promiscuous mode [ 66.159108][ T5233] netlink: 128 bytes leftover after parsing attributes in process `syz.0.213'. [ 66.160961][ T5233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.166895][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.172481][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.212386][ T5143] team0: Port device team_slave_0 added [ 66.240479][ T5143] team0: Port device team_slave_1 added [ 66.255417][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.256541][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.275395][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.283766][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.285029][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.300365][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.455832][ T5143] device hsr_slave_0 entered promiscuous mode [ 66.471408][ T5143] device hsr_slave_1 entered promiscuous mode [ 66.526798][ T5143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.528093][ T5143] Cannot create hsr debugfs directory [ 66.535848][ T5268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 66.538375][ T5268] batman_adv: batadv0: Adding interface: vlan1 [ 66.539393][ T5268] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.553147][ T5268] batman_adv: batadv0: Interface activated: vlan1 [ 66.554729][ T5272] netlink: 830 bytes leftover after parsing attributes in process `syz.2.225'. [ 66.570685][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.571873][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.762076][ T5143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 66.784408][ T5143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 66.967494][ T5143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 66.992200][ T5331] Illegal XDP return value 4025532416 on prog (id 41) dev N/A, expect packet loss! [ 67.008267][ T5143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.054066][ T5337] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.246'. [ 67.168082][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 69.391104][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 71.614743][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 72.045347][ T24] cfg80211: failed to load regulatory.db [ 73.838396][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 79.043760][ T5346] validate_nla: 13 callbacks suppressed [ 79.043778][ T5346] netlink: 'syz.2.250': attribute type 22 has an invalid length. [ 79.046074][ T5346] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.250'. [ 79.157814][ T5369] netlink: 'syz.2.259': attribute type 29 has an invalid length. [ 79.175256][ T5372] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.260'. [ 79.177486][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.178796][ T5369] netlink: 'syz.2.259': attribute type 29 has an invalid length. [ 79.195244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.196762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.217156][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.271986][ T5380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.263'. [ 79.274477][ T5382] netlink: 'syz.5.264': attribute type 10 has an invalid length. [ 79.283985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.285630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.287232][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.288443][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.317387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.324444][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.326125][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.327656][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.328182][ T5390] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 79.328911][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.331554][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.358794][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.369276][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.372016][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.650052][ T5390] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 79.651530][ T5399] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 79.653045][ T5409] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 79.658994][ T5143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.660746][ T5143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.667581][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.669099][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.670679][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.672205][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.673591][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.675184][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.684318][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.699886][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.895235][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.896616][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.907961][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.368835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.370574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.384872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.386713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.388492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.391236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.392009][ T5463] netlink: 'syz.2.282': attribute type 29 has an invalid length. [ 80.400034][ T5463] netlink: 'syz.2.282': attribute type 29 has an invalid length. [ 80.403161][ T5143] device veth0_vlan entered promiscuous mode [ 80.411531][ T5143] device veth1_vlan entered promiscuous mode [ 80.515511][ T5143] device veth0_macvtap entered promiscuous mode [ 80.518380][ T5143] device veth1_macvtap entered promiscuous mode [ 80.591267][ T5483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'. [ 92.094300][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.102214][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.105992][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.107599][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.109253][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.114236][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.237865][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.239613][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.244513][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.246219][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.267384][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.284011][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.285703][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.289499][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.296088][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.297859][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.304467][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.121854][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.123702][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.226149][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.227947][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.229601][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.249168][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.250785][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.252390][ T5542] delete_channel: no stack [ 93.259354][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.260996][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.262895][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.274352][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.276123][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.280408][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.282590][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.284385][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.312416][ T5549] validate_nla: 3 callbacks suppressed [ 93.312425][ T5549] netlink: 'syz.5.305': attribute type 29 has an invalid length. [ 93.320182][ T5143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321647][ T5143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.323139][ T5143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.324606][ T5143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.347943][ T5549] netlink: 'syz.5.305': attribute type 29 has an invalid length. [ 93.351134][ T5550] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 93.352442][ T5550] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 93.455221][ T5571] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 93.656071][ T5571] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 93.657636][ T5560] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 93.747395][ T5591] netlink: 'syz.0.319': attribute type 29 has an invalid length. [ 93.783716][ T5591] netlink: 'syz.0.319': attribute type 29 has an invalid length. [ 93.788339][ T5591] netlink: 'syz.0.319': attribute type 29 has an invalid length. [ 93.789780][ T1587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.791122][ T1587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.792506][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.847051][ T5598] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.323'. [ 94.130005][ T1587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.131634][ T1587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.706271][ T5606] netlink: 188 bytes leftover after parsing attributes in process `syz.4.326'. [ 105.713760][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.758103][ T4418] device hsr_slave_0 left promiscuous mode [ 105.765209][ T5630] validate_nla: 3 callbacks suppressed [ 105.765218][ T5630] netlink: 'syz.5.330': attribute type 29 has an invalid length. [ 105.796569][ T4418] device hsr_slave_1 left promiscuous mode [ 105.856793][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.858135][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.859793][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.861179][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.862597][ T4418] device bridge_slave_1 left promiscuous mode [ 105.863677][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.901485][ T4418] device bridge_slave_0 left promiscuous mode [ 105.902623][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.027926][ T4418] device veth1_macvtap left promiscuous mode [ 106.029112][ T4418] device veth0_macvtap left promiscuous mode [ 106.030373][ T4418] device veth1_vlan left promiscuous mode [ 106.031528][ T4418] device veth0_vlan left promiscuous mode [ 108.211280][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 108.380967][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 108.551191][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.766558][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.305457][ T4418] bond0 (unregistering): Released all slaves [ 110.634321][ T5625] netlink: 'syz.0.328': attribute type 21 has an invalid length. [ 110.635711][ T5625] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 110.637456][ T5630] netlink: 'syz.5.330': attribute type 29 has an invalid length. [ 110.690164][ T5645] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.333'. [ 110.737756][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 110.797751][ T5664] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 110.799274][ T5664] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 110.807661][ T5664] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 110.809172][ T5664] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 110.810765][ T5664] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 110.816075][ T5662] netlink: 'syz.6.342': attribute type 29 has an invalid length. [ 110.818248][ T5668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.339'. [ 110.820062][ T5668] device ipvlan1 entered promiscuous mode [ 110.839218][ T5668] bridge0: port 3(ipvlan1) entered blocking state [ 110.844644][ T5668] bridge0: port 3(ipvlan1) entered disabled state [ 110.846382][ T5668] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 110.900584][ T5678] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.345'. [ 110.902306][ T5678] bridge: RTM_NEWNEIGH with invalid ether address [ 111.263106][ T5729] netlink: 188 bytes leftover after parsing attributes in process `syz.0.366'. [ 111.333351][ T5736] validate_nla: 5 callbacks suppressed [ 111.333368][ T5736] netlink: 'syz.6.370': attribute type 22 has an invalid length. [ 111.349092][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.370'. [ 111.474587][ T5750] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 111.542162][ T5750] device syz_tun entered promiscuous mode [ 111.560464][ T5750] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.562001][ T5754] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.374'. [ 111.656059][ T5772] netlink: 'syz.4.381': attribute type 22 has an invalid length. [ 112.438368][ T5841] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 112.439957][ T5841] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 112.456153][ T5841] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 112.457696][ T5841] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 112.459097][ T5841] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 112.603574][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.605445][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.613555][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.615148][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.616834][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.621931][ T5866] netlink: 'syz.6.416': attribute type 29 has an invalid length. [ 112.630334][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.632033][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.633688][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.641109][ T5864] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 113.261190][ T5860] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 113.262612][ T5860] netlink: 2 bytes leftover after parsing attributes in process `syz.2.413'. [ 113.264625][ T5860] device hsr0 entered promiscuous mode [ 113.265895][ T5860] bridge0: port 3(hsr0) entered blocking state [ 113.267138][ T5860] bridge0: port 3(hsr0) entered disabled state [ 113.272741][ T5860] bridge0: port 3(hsr0) entered blocking state [ 113.273906][ T5860] bridge0: port 3(hsr0) entered forwarding state [ 113.300654][ T5882] team0: Device hsr_slave_0 failed to register rx_handler [ 113.487333][ T5906] device syzkaller0 entered promiscuous mode [ 125.185517][ T5941] device bridge0 entered promiscuous mode [ 129.714133][ T4333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.716577][ T4333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.721610][ T4333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.723538][ T4333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.724885][ T4333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.726115][ T4333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.909807][ T4337] Bluetooth: hci5: command 0x0409 tx timeout [ 132.262978][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.264122][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.144156][ T4337] Bluetooth: hci5: command 0x041b tx timeout [ 136.357232][ T4337] Bluetooth: hci5: command 0x040f tx timeout [ 136.873435][ T5976] validate_nla: 9 callbacks suppressed [ 136.873450][ T5976] netlink: 'syz.5.451': attribute type 21 has an invalid length. [ 136.875681][ T5976] netlink: 'syz.5.451': attribute type 11 has an invalid length. [ 136.943230][ T6000] x_tables: ip_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 137.155844][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 137.267736][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.275572][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.294507][ T5981] device bridge_slave_0 entered promiscuous mode [ 137.316761][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.351006][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.353211][ T5981] device bridge_slave_1 entered promiscuous mode [ 137.372274][ T6058] device bond_slave_0 entered promiscuous mode [ 137.373526][ T6058] device bond_slave_1 entered promiscuous mode [ 137.383798][ T6058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.440028][ T6058] device bond_slave_0 left promiscuous mode [ 137.441052][ T6058] device bond_slave_1 left promiscuous mode [ 137.496339][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.501532][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.468'. [ 137.546105][ T5938] bond0: (slave syz_tun): Releasing backup interface [ 137.579744][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.603176][ T5981] team0: Port device team_slave_0 added [ 137.604978][ T5981] team0: Port device team_slave_1 added [ 137.930938][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.936826][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.938060][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.943015][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.961280][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.962705][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.996208][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.070093][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.093338][ T6116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.485'. [ 138.112291][ T5981] device hsr_slave_0 entered promiscuous mode [ 138.178023][ T5981] device hsr_slave_1 entered promiscuous mode [ 138.206586][ T5981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.207842][ T5981] Cannot create hsr debugfs directory [ 138.271711][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.400279][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.415777][ T5981] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.469245][ T5981] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.518619][ T5981] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.560579][ T5981] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.580822][ T4337] Bluetooth: hci5: command 0x0419 tx timeout [ 138.607958][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.616923][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.618665][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.625489][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.638927][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.640603][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.642081][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.643368][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.645364][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.648054][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.667285][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.668476][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.669940][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.671737][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.674535][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.676272][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.681838][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.683448][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.688147][ T6127] netlink: 27 bytes leftover after parsing attributes in process `syz.0.489'. [ 138.702427][ T5981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.709285][ T5981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.713173][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.714914][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.716437][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.718694][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.725363][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.814810][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.816179][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.821950][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.264103][ T5981] device veth0_vlan entered promiscuous mode [ 139.319029][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.320746][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.322273][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.324216][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.328328][ T5981] device veth1_vlan entered promiscuous mode [ 139.345630][ T5981] device veth0_macvtap entered promiscuous mode [ 139.348023][ T5981] device veth1_macvtap entered promiscuous mode [ 139.350528][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.352414][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.354020][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.355684][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.360145][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.361837][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.370893][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.372622][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.409468][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.411210][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.413264][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.419708][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.421301][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.423142][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.424943][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.427462][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.429079][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.430866][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.450499][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.452178][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.453749][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.456646][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.468587][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.470295][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.472116][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.473764][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.475468][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.477145][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.485634][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.487307][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.489055][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.510268][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.597806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.599645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.602369][ T5981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.603835][ T5981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.605232][ T5981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.606796][ T5981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.754737][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.503'. [ 139.758329][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 151.420623][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.420802][ T6211] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 151.421950][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.436454][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.487523][ T6216] device ipip0 entered promiscuous mode [ 151.547733][ T4897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.549237][ T4897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.558384][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.050480][ T6291] netlink: 'syz.6.527': attribute type 1 has an invalid length. [ 152.052501][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.527'. [ 152.057689][ T6298] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input2 [ 152.101586][ T6308] netlink: 'syz.6.528': attribute type 10 has an invalid length. [ 152.103013][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.6.528'. [ 152.170406][ T6325] RDS: rds_bind could not find a transport for ::9500:0:0:0, load rds_tcp or rds_rdma? [ 152.184739][ T6308] team0: Port device geneve0 added [ 152.428229][ T6320] IPv6: Can't replace route, no match found [ 152.429562][ T6320] IPv6: Can't replace route, no match found [ 152.476245][ T39] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 152.869461][ T6401] netlink: 'syz.4.541': attribute type 41 has an invalid length. [ 152.872216][ T6402] device syzkaller0 entered promiscuous mode [ 152.967706][ T9] device hsr_slave_0 left promiscuous mode [ 153.024288][ T9] device hsr_slave_1 left promiscuous mode [ 153.109298][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.110743][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.112377][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.113598][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.115150][ T9] bridge0: port 3(hsr0) entered disabled state [ 153.152557][ T9] device bridge_slave_1 left promiscuous mode [ 153.153766][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.196191][ T9] device bridge_slave_0 left promiscuous mode [ 153.197294][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.323192][ T9] device veth1_macvtap left promiscuous mode [ 153.324188][ T9] device veth0_macvtap left promiscuous mode [ 153.326206][ T9] device veth1_vlan left promiscuous mode [ 153.327606][ T9] device veth0_vlan left promiscuous mode [ 155.538306][ T9] team0 (unregistering): Port device team_slave_1 removed [ 155.565264][ T6349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.697507][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 155.719579][ T9] team0 (unregistering): Port device team_slave_0 removed [ 155.878992][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.103171][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.664870][ T9] bond0 (unregistering): Released all slaves [ 158.036891][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 158.038423][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 158.077161][ T6440] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.155558][ T6451] Bluetooth: MGMT ver 1.22 [ 158.723335][ T6516] tipc: Started in network mode [ 158.724369][ T6516] tipc: Node identity dea91280375f, cluster identity 4711 [ 158.725709][ T6516] tipc: Enabled bearer , priority 0 [ 158.737476][ T6516] device syzkaller0 entered promiscuous mode [ 158.804325][ T6516] tipc: Resetting bearer [ 158.816887][ C0] net_ratelimit: 33020 callbacks suppressed [ 158.816896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.819505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.823696][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.584'. [ 158.942603][ T6514] tipc: Resetting bearer [ 159.003524][ T6514] tipc: Disabling bearer [ 159.036276][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.591'. [ 159.056484][ T6564] device hsr_slave_0 left promiscuous mode [ 159.132598][ T6564] device hsr_slave_1 left promiscuous mode [ 159.842130][ T6649] device syzkaller0 entered promiscuous mode [ 160.076252][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.623'. [ 161.843533][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 161.843743][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 164.067217][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 171.449660][ T6696] netlink: 'syz.6.624': attribute type 5 has an invalid length. [ 171.454369][ T6703] tipc: Failed to obtain node identity [ 171.455317][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 171.543287][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 171.569299][ T6722] device syzkaller0 entered promiscuous mode [ 171.572849][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 171.776631][ T6722] tipc: Started in network mode [ 171.777541][ T6722] tipc: Node identity 92782aac71f7, cluster identity 4711 [ 171.779088][ T6722] tipc: Enabled bearer , priority 0 [ 171.808486][ T6752] tipc: Resetting bearer [ 171.849708][ T6719] tipc: Resetting bearer [ 171.926150][ T6719] tipc: Disabling bearer [ 178.264265][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 183.487194][ T6770] tipc: Enabled bearer , priority 0 [ 183.495124][ T6762] device syzkaller0 entered promiscuous mode [ 183.500466][ T6785] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 183.601472][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.646'. [ 183.606361][ T6791] device syzkaller0 entered promiscuous mode [ 183.609366][ T6796] tipc: Resetting bearer [ 183.635586][ T6760] tipc: Resetting bearer [ 183.770423][ T6760] tipc: Disabling bearer [ 183.816885][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.818818][ T6825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.830869][ T6829] netlink: 'syz.6.649': attribute type 1 has an invalid length. [ 183.845099][ T6829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.846766][ T6833] netlink: 52 bytes leftover after parsing attributes in process `syz.5.651'. [ 183.855387][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.857184][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.894512][ T6834] bond1: (slave geneve2): making interface the new active one [ 183.910229][ T6834] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 183.911765][ T6835] netlink: 52 bytes leftover after parsing attributes in process `syz.5.651'. [ 183.914395][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 183.928336][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.654'. [ 184.205342][ T6885] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 184.219824][ T6885] device bond1 entered promiscuous mode [ 184.220920][ T6885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.307975][ T6894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.309356][ T6894] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 184.311032][ T6894] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 184.343175][ T6894] bond1: (slave gre1): making interface the new active one [ 184.344559][ T6894] device gre1 entered promiscuous mode [ 184.346474][ T6894] ------------[ cut here ]------------ [ 184.347392][ T6894] kernel BUG at net/core/skbuff.c:1840! [ 184.348470][ T6894] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 184.349805][ T6894] Modules linked in: [ 184.350529][ T6894] CPU: 1 PID: 6894 Comm: syz.0.662 Not tainted syzkaller #0 [ 184.351792][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.353490][ T6894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 184.354825][ T6894] pc : pskb_expand_head+0xfd4/0x1030 [ 184.355788][ T6894] lr : pskb_expand_head+0xfd4/0x1030 [ 184.356712][ T6894] sp : ffff800022956580 [ 184.357421][ T6894] x29: ffff8000229565e0 x28: 00000000000000c0 x27: 0000000000000000 [ 184.358870][ T6894] x26: dfff800000000000 x25: 0000000000000a20 x24: 0a8e8000106b2028 [ 184.360256][ T6894] x23: ffff0000d65f8000 x22: ffff0000f7879328 x21: 00000000ffff7fe0 [ 184.361760][ T6894] x20: ffff0000f59d6e8c x19: ffff0000f59d6dc0 x18: ffff800011babf60 [ 184.363239][ T6894] x17: ffff80001836c000 x16: ffff8000082d93d8 x15: ffff80000fd548d4 [ 184.364656][ T6894] x14: 0000000000000001 x13: 1fffe0001bc6071c x12: 0000000000080000 [ 184.366194][ T6894] x11: 000000000007ffff x10: ffff800023569000 x9 : ffff80000fd83500 [ 184.367584][ T6894] x8 : 0000000000080000 x7 : 0000000000000000 x6 : 000000000000003f [ 184.369000][ T6894] x5 : 0000000000000018 x4 : ffff0000f7879328 x3 : 0000000000000a20 [ 184.370386][ T6894] x2 : 0000000000000000 x1 : 00000000ffff7fe0 x0 : 0000000000000000 [ 184.371724][ T6894] Call trace: [ 184.372254][ T6894] pskb_expand_head+0xfd4/0x1030 [ 184.373081][ T6894] ipgre_header+0xd8/0x4bc [ 184.373890][ T6894] arp_create+0x2b8/0x7ec [ 184.374589][ T6894] arp_send+0xa8/0x11c [ 184.375329][ T6894] inetdev_event+0xdb0/0x12d8 [ 184.376184][ T6894] raw_notifier_call_chain+0xd4/0x164 [ 184.377125][ T6894] call_netdevice_notifiers+0x110/0x198 [ 184.378087][ T6894] bond_change_active_slave+0x1ef8/0x2fa0 [ 184.379084][ T6894] bond_select_active_slave+0x724/0xa78 [ 184.380051][ T6894] bond_enslave+0x1e08/0x3178 [ 184.380878][ T6894] rtnl_newlink+0x1760/0x1a54 [ 184.381743][ T6894] rtnetlink_rcv_msg+0x698/0xcdc [ 184.382605][ T6894] netlink_rcv_skb+0x218/0x3e8 [ 184.383466][ T6894] rtnetlink_rcv+0x28/0x38 [ 184.384244][ T6894] netlink_unicast+0x60c/0x814 [ 184.385094][ T6894] netlink_sendmsg+0x6f4/0x9c0 [ 184.385883][ T6894] ____sys_sendmsg+0x5c8/0x938 [ 184.386680][ T6894] __sys_sendmsg+0x288/0x374 [ 184.387465][ T6894] __arm64_sys_sendmsg+0x80/0x94 [ 184.388313][ T6894] invoke_syscall+0x98/0x2b4 [ 184.389098][ T6894] el0_svc_common+0x138/0x258 [ 184.389876][ T6894] do_el0_svc+0x58/0x130 [ 184.390604][ T6894] el0_svc+0x58/0x128 [ 184.391263][ T6894] el0t_64_sync_handler+0x84/0xf0 [ 184.392059][ T6894] el0t_64_sync+0x18c/0x190 [ 184.392796][ T6894] Code: aa1c03e0 9628e85e d4210000 961ca08e (d4210000) [ 184.393914][ T6894] ---[ end trace 0000000000000000 ]--- [ 184.675920][ T6894] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 184.677086][ T6894] SMP: stopping secondary CPUs [ 184.677826][ T6894] Kernel Offset: disabled [ 184.678514][ T6894] CPU features: 0x080000,000f0097,a65bfea7 [ 184.679473][ T6894] Memory Limit: none [ 184.963028][ T6894] Rebooting in 86400 seconds..