last executing test programs: 1m5.967927558s ago: executing program 2 (id=1121): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000000), 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m5.074605007s ago: executing program 2 (id=1122): socket(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) listen(r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) 31.486250529s ago: executing program 2 (id=1132): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000000), 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 27.859778427s ago: executing program 2 (id=1165): pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x7, 0x7, 0x4, 0x7, 0xffffffffffffff00, 0x1, 0x4, 0xffffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) close(r1) 26.660316344s ago: executing program 2 (id=1170): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x40001df, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 23.494564988s ago: executing program 2 (id=1174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008880}, 0x488c0) 5.779347061s ago: executing program 1 (id=1224): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) getpid() syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) 5.76712469s ago: executing program 4 (id=1225): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x200288e0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)="4008fbc6867068345fe5e4435a20e29cad836b30124290f36fc6699040c5547cb10852558f8eb141587d51dd50901afac2be19f6bd301ed550871f3f40a00263aee38f64df9c05e35673bc9ced44ee24bd399edb32e74f18d90bc64c24baa3521b7f18fefce93a0ecb375a75bdf7713cd1eb34c7d7b7861228089a2c4981", 0x7e}, {&(0x7f0000000240)="96bd0439c4cb5fd12a0efad6ed6187dc666f0878f8257976fdf8e7fd476157e5", 0x20}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x148}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000500)="0774aea767518c51bcd58a3536a4ddacb6e174", 0x13}, {&(0x7f0000000540)="a2805a2d7ac4de2ff372d2725193f9d4d5bc1ff4df123dc3f8ed77c9531c1a89a5272874f9993cb4db6556946adb6bb877d73bab7d1ccf5034b112d9865d4dabab54fe241f69df0b0fd57e96a18713924549ecb6ef244581e72e600b3578a0318b0d6b86061e9c413cc42747bfd90fe3b5d028c0b733b1c6f97083cc7d2d", 0x7e}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000001000000ffff0000"], 0x10}}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x1, @loopback, 0x6}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000740)="37fef4549f8620945a34ba7095ccb7e70bf89c74e3c260adb286bfd0c619154e86a526b155980420fdc50461273c2b0b09f0165533a5b4e4a7c44203cba5ef9a306dc2", 0x43}, {&(0x7f00000007c0)="16c90ab8f146cd96e3ededdbda0fe3b1c680d1649a9d1d352b5bfa6870151c2d1dc6bb6287e95d75d749c1224ad04a7a304030ade8ff51b2560c2ef276a8e9de9474270d738d945f9a4f1c3e659d97e629c7a19725c81ed56103b799175bbdb3e8f2b0100452398bb2ab0a06fa537a67a05b33f539439d2cc4af978a3693228d0a2c5c968914c9dba69d1dad5674525d32e88dee033b1ad35150a2b03363427c3cd5f546b31179f8085129659f2c04c4beb31ec7a700", 0xb6}, {&(0x7f00000018c0)}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="00010000000000001101000004000000e301a37b7f87252870144c95b0d0cc425fa973d776ecdca26a235a39a5cc105eba6ed812a737a805000000000000006a3e5a6d36ef7c3e4a836518e7842019931ab3381130eba385023cfff75637abb729364ba3efbc98c201291dc43addd7c8f92fb251dd06dcdb364c7c90d235ae84769122a8f2ce77f5266d4612dd8201840fdf2fcd787ced8a9043dc731705404e15bf3505bc5eac559ec2deee34e3c58522f21e9bcb93280bbe0443ec58884334a94ffb0da6049693c8c5b57341f21411645aacd2968d9d46f1ce689113b339"], 0x100}}], 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000001d40)={0x18, 0x0, {0x4, @multicast, 'pimreg0\x00'}}, 0x1e) connect$llc(0xffffffffffffffff, &(0x7f0000001d80)={0x1a, 0x0, 0x5, 0x6, 0x0, 0x0, @remote}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001e00)={'sit0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f80)=[{0x0}, {&(0x7f0000003c00)=""/54, 0x36}], 0x2}}], 0x1, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="84c7a275be33ec5669c0990fa552e08192f2fc69682a8ad8581573bf550f1686edbbff02c5db399aab59cf4bef9a3ea6dde94af703562afbb4bf5818aecc2424fe34124e1e0d436be088705cff16287aaebe68132d18d12d2bbfb616ded9d41a2a6038861feb85474743abf0c36eee08efd7873c14c36fe91fd40efa9421d678f4f0b5cc2c833fd585a24383f7c9cadac7dcb43877c1914794842c623bff172d090ed4c3fb1b8c7f3159e12d5b878256a739965c3e7147305d38448c5b10f4d9ae3bc3a8", 0xc4}, {&(0x7f00000002c0)="bac6c6afc7063e20847be3b16e4ea13ceb6fd80bcb593f18ae3d8c2d20e915352f9b9b15b21a4f2caee69d", 0x2b}, {&(0x7f0000000480)="a563a3af2b6d39b9f75957f0c1ef610700d83a840bd0bf7a3eea5c6a2b7ee129a34eca36adecfa83101a64c22b88c1d2a9148ee7050ebcbeb3cbfc4054ecde430bad5c3ea2d1a9039e719e7ba3fbe2917f0f2249349403dfc375b2e24796869427c4b5d485e40732102f0c6f57b91459a6", 0x71}, {&(0x7f0000000e40)="5123c7ee7b1cd008674af61d01c66752b437ac6fe4ac9dd5f67dd6595ea0c19f118eee2c133d61ea6323f8f3bdbd66fa4e98c56d8b910452c787ae5480039d4a798b0311e5932b6cf343b8860f43521b0c64481fd0d365f7713b7a4164262a2d1d780dcebc09b390ac997ece6de8e3bb22118066ff5d4fbeae34fb573063fcd64604fe9fa46b020ff38db8ac477f", 0x8e}, {&(0x7f0000000f00)="b39651ec5705807cf207f012c6a3761ce93a5b4211569022d46caa90b29befb08bcb8edc658845fd2fff8a7f066b4ddf0383bfb255470c1bca55aaf22ec3cf2c18a8ad40e130f54b84836de877d4e5187b218616f9d0862d449f713916f502e18cab042688f97a84bc55b9817e2e756e9589591392c1fe6cc0223fe37e4a20011079d70502098b086a10d2579c72c022002746ad8b898620ed812c845a5580f72a3dba50373c96fcb1410537299dee6aab97dc960540c3ba", 0xb8}, {&(0x7f0000001140)="25ad2f5d009069dce6ffbd8ba47a63a30c568b96c6fc27b60ed9c33c7fae4f3db04e45fe3b180d2fa435fea44678c6020d426e86fea5094a31d9242b72e6acbce978f88003a83ffeb7d27511e4b688d439c6b0a95ce50e1dd343fe3e16d83079374224dcbba8444a4f1cc09254ca24d2d64b79619f78920aaf61e06bf76c7ea0c76a764458aa5dc2d86093d3393bb46adf22ca5ee5df32f8daeec8cd09bef629d18b26ff53523419e06de992768e4ca04a739a00d3a006eaef82f325f965e6f9084cb5dc626918", 0xc7}, {&(0x7f00000009c0)="54ec872d92cb537266502fbecf2da202425e78e6ae1b7fb4db1492cb03c6b74c062d82037f013ca6a38a15fb0901300319832d834669caecfd23d272dea70ba275977dcf345bb9313c8081c87fe5f9b60825d69b98656a73a940cd726c0c62abafb9ba5507aede71ed578d2a44206c052061c73e6c84bf73", 0x78}], 0x7}}], 0x1, 0x4001c00) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYBLOB="000128bd7000fbdbdf25120000000800060000020000080006008e0000000800080004000000080009000400000008000900060000000800080009000000080007000200000008000600020000004d269e3badfafd637149a8f658f2e488d3d1d0fcd5813526a48025ca"], 0x54}}, 0x24008895) 4.970977491s ago: executing program 3 (id=1226): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, &(0x7f0000000000), 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.674677871s ago: executing program 0 (id=1227): syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaddc721651a86dd6002000000343c0020010000000000000000000000000002fe80000000000000070800000000000000000708000000000000000005020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x74}}, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x6020400) 4.67385453s ago: executing program 1 (id=1228): sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 4.673228328s ago: executing program 4 (id=1229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000308e9030000000000000000000000002c00048008000440000000220800054000000001080001400000000008000479aca219ede984b340000000000600024000000000050003002f000000"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001300a10000000000000000000b0000760000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000800900000004000000"], 0x4c}}, 0x4000040) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) getresgid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)) 3.997336722s ago: executing program 3 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0xac}}, 0x0) 2.697528606s ago: executing program 0 (id=1232): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) 2.543088688s ago: executing program 0 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 2.540677175s ago: executing program 3 (id=1234): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x709102, 0x108) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000180)=0xb86d, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) 2.298636236s ago: executing program 0 (id=1235): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1.70031995s ago: executing program 1 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x54) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvDdFNIskKSUAw2NhYWgi2NpYWFlYW/gW2WqggWJjSThiZj2wmm02IHxjR9weZeebrnZmX5FnYgCCI/5aPH76+f3hu69IpAPuxjhXT/9nRtTg4Of/d4zsnH22ff/L87dPXzQN3X+bjMblGLL6/B+DVjoMUzDU7Tqxe1xW3NC6D44TRV8Dga/lNKHQjBsM1M+empVv7jEhi/3or2btRT+JAFqEsIllU7P3loYYDhj0Aq+p0QjBrvNPr36omSdzOi5IY7TM19KNiXv7U+XY4tjHKnhAyWVcf3B/ItskNAvAsfyE4QqMrYNg1egsr8H1/nBLr/kfccXxnkfsvVzxT4tDmn9pUf0GBv+Hu/7Ao/ZY4LN8jf9BZz+HhyAPtOZ+WfvefF8q4AEwNvVlLkgu/ENkrSFQmxv4knf245U8u3Mw/ymnjdrnT62/WG9VaXIubUVQ5G5wOgjNRWRmRLuf436rypzUrfmnGXI956FbTtB12gbQdZu1Il5bj7r5ofVFruPI/jo1jOgYzz6zsQZmDmQ9XtVQbTvHMezPvRBAEQRAEQRAEQRAEQRAEUcxRMOh/wgQzL0SLiC6qN5TfAwAA//9KnWb+") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) 1.634600312s ago: executing program 4 (id=1237): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000200)='vfat\x00', 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x1}, 0x4, 0x3f, 0x5, 0x1000, 0x22, 'syz1\x00', "26946273a17279d65e7660f3a4878860d8b940b43e719cecb5ffca7e526ba138", "31d8c0bd49b0aecbf42cc54b26220d0694aff7124362e01924d16ad496ea8628", [{0x800}, {0x80, 0x7, {0x2, 0x6}}, {0x101, 0x400}, {0xff01, 0x81, {0x0, 0xc8e}}, {0x8, 0x100, {0x2, 0x153}}, {0x2, 0x0, {0x2, 0x7f}}, {0x0, 0xf27, {0x0, 0x7f}}, {0x40, 0x81}, {0x7a, 0x8, {0x1}}, {0x200, 0x9, {0x1}}, {0x401, 0x2, {0x3, 0x3}}, {0x24b7, 0xfffc, {0x1}}, {0x0, 0x9, {0x2, 0x800}}, {0xe38f, 0x1000, {0x3}}, {0xb5a2, 0x2}, {0x3, 0x0, {0x0, 0x2}}, {0x1ff, 0x4}, {0x0, 0x2}, {0x0, 0x200, {0x2, 0xc0000}}, {0x0, 0x0, {0x1, 0x40000000}}, {0x0, 0x6, {0x1, 0x3f}}, {0x8001, 0xc3, {0x3, 0xffffff01}}, {0x1, 0x6, {0x0, 0x20}}, {0x59, 0xc24, {0x0, 0x7f}}, {0x0, 0x0, {0x3, 0x3}}, {0x0, 0x0, {0x3}}, {0x6, 0x0, {0x0, 0x8}}, {0x480d}, {0x0, 0x0, {0x2}}, {0x0, 0x0, {0x0, 0x1}}, {0x0, 0xb6d}, {0x4, 0x401, {0x2}}, {0x5, 0x0, {0x3}}, {0x40, 0x0, {0x0, 0x101}}, {0x101, 0x6, {0x2}}, {0x6, 0x0, {0x3, 0x89e}}, {0x8, 0x0, {0x2, 0x40}}, {0x0, 0xfff, {0x3, 0x3}}, {0x4, 0x3ff, {0x3}}, {0x0, 0x0, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x44, r11, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x44}}, 0x0) listen(r8, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1.633789603s ago: executing program 3 (id=1238): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x7a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.571705687s ago: executing program 1 (id=1239): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) getpid() syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.539973314s ago: executing program 3 (id=1240): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x200288e0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)="4008fbc6867068345fe5e4435a20e29cad836b30124290f36fc6699040c5547cb10852558f8eb141587d51dd50901afac2be19f6bd301ed550871f3f40a00263aee38f64df9c05e35673bc9ced44ee24bd399edb32e74f18d90bc64c24baa3521b7f18fefce93a0ecb375a75bdf7713cd1eb34c7d7b7861228089a2c4981", 0x7e}, {&(0x7f0000000240)="96bd0439c4cb5fd12a0efad6ed6187dc666f0878f8257976fdf8e7fd476157e5", 0x20}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x148}}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x1, @loopback, 0x6}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000740)="37fef4549f8620945a34ba7095ccb7e70bf89c74e3c260adb286bfd0c619154e86a526b155980420fdc50461273c2b0b09f0165533a5b4e4a7c44203cba5ef9a306dc2", 0x43}, {&(0x7f00000007c0)="16c90ab8f146cd96e3ededdbda0fe3b1c680d1649a9d1d352b5bfa6870151c2d1dc6bb6287e95d75d749c1224ad04a7a304030ade8ff51b2560c2ef276a8e9de9474270d738d945f9a4f1c3e659d97e629c7a19725c81ed56103b799175bbdb3e8f2b0100452398bb2ab0a06fa537a67a05b33f539439d2cc4af978a3693228d0a2c5c968914c9dba69d1dad5674525d32e88dee033b1ad35150a2b03363427c3cd5f546b31179f8085129659f2c04c4beb31ec7a700", 0xb6}, {&(0x7f00000018c0)}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="00010000000000001101000004000000e301a37b7f87252870144c95b0d0cc425fa973d776ecdca26a235a39a5cc105eba6ed812a737a805000000000000006a3e5a6d36ef7c3e4a836518e7842019931ab3381130eba385023cfff75637abb729364ba3efbc98c201291dc43addd7c8f92fb251dd06dcdb364c7c90d235ae84769122a8f2ce77f5266d4612dd8201840fdf2fcd787ced8a9043dc731705404e15bf3505bc5eac559ec2deee34e3c58522f21e9bcb93280bbe0443ec58884334a94ffb0da6049693c8c5b57341f21411645aacd2968d9d46f1ce689113b3394b"], 0x100}}], 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000001d40)={0x18, 0x0, {0x4, @multicast, 'pimreg0\x00'}}, 0x1e) connect$llc(0xffffffffffffffff, &(0x7f0000001d80)={0x1a, 0x0, 0x5, 0x6, 0x0, 0x0, @remote}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001e00)={'sit0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f80)=[{0x0}, {&(0x7f0000003c00)=""/54, 0x36}], 0x2}}], 0x1, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="84c7a275be33ec5669c0990fa552e08192f2fc69682a8ad8581573bf550f1686edbbff02c5db399aab59cf4bef9a3ea6dde94af703562afbb4bf5818aecc2424fe34124e1e0d436be088705cff16287aaebe68132d18d12d2bbfb616ded9d41a2a6038861feb85474743abf0c36eee08efd7873c14c36fe91fd40efa9421d678f4f0b5cc2c833fd585a24383f7c9cadac7dcb43877c1914794842c623bff172d090ed4c3fb1b8c7f3159e12d5b878256a739965c3e7147305d38448c5b10f4d9ae3bc3a8", 0xc4}, {&(0x7f00000002c0)="bac6c6afc7063e20847be3b16e4ea13ceb6fd80bcb593f18ae3d8c2d20e915352f9b9b15b21a4f2caee69d", 0x2b}, {&(0x7f0000000480)="a563a3af2b6d39b9f75957f0c1ef610700d83a840bd0bf7a3eea5c6a2b7ee129a34eca36adecfa83101a64c22b88c1d2a9148ee7050ebcbeb3cbfc4054ecde430bad5c3ea2d1a9039e719e7ba3fbe2917f0f2249349403dfc375b2e24796869427c4b5d485e40732102f0c6f57b91459a6", 0x71}, {&(0x7f0000000e40)="5123c7ee7b1cd008674af61d01c66752b437ac6fe4ac9dd5f67dd6595ea0c19f118eee2c133d61ea6323f8f3bdbd66fa4e98c56d8b910452c787ae5480039d4a798b0311e5932b6cf343b8860f43521b0c64481fd0d365f7713b7a4164262a2d1d780dcebc09b390ac997ece6de8e3bb22118066ff5d4fbeae34fb573063fcd64604fe9fa46b020ff38db8ac477f", 0x8e}, {&(0x7f0000000f00)="b39651ec5705807cf207f012c6a3761ce93a5b4211569022d46caa90b29befb08bcb8edc658845fd2fff8a7f066b4ddf0383bfb255470c1bca55aaf22ec3cf2c18a8ad40e130f54b84836de877d4e5187b218616f9d0862d449f713916f502e18cab042688f97a84bc55b9817e2e756e9589591392c1fe6cc0223fe37e4a20011079d70502098b086a10d2579c72c022002746ad8b898620ed812c845a5580f72a3dba50373c96fcb1410537299dee6aab97dc960540c3ba", 0xb8}, {&(0x7f0000001140)="25ad2f5d009069dce6ffbd8ba47a63a30c568b96c6fc27b60ed9c33c7fae4f3db04e45fe3b180d2fa435fea44678c6020d426e86fea5094a31d9242b72e6acbce978f88003a83ffeb7d27511e4b688d439c6b0a95ce50e1dd343fe3e16d83079374224dcbba8444a4f1cc09254ca24d2d64b79619f78920aaf61e06bf76c7ea0c76a764458aa5dc2d86093d3393bb46adf22ca5ee5df32f8daeec8cd09bef629d18b26ff53523419e06de992768e4ca04a739a00d3a006eaef82f325f965e6f9084cb5dc626918", 0xc7}, {&(0x7f00000009c0)="54ec872d92cb537266502fbecf2da202425e78e6ae1b7fb4db1492cb03c6b74c062d82037f013ca6a38a15fb0901300319832d834669caecfd23d272dea70ba275977dcf345bb9313c8081c87fe5f9b60825d69b98656a73a940cd726c0c62abafb9ba5507aede71ed578d2a44206c052061c73e6c84bf73", 0x78}], 0x7}}], 0x1, 0x4001c00) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYBLOB="000128bd7000fbdbdf25120000000800060000020000080006008e0000000800080004000000080009000400000008000900060000000800080009000000080007000200000008000600020000004d269e3badfafd637149a8f658f2e488d3d1d0fcd5813526a48025ca"], 0x54}}, 0x24008895) 1.386771714s ago: executing program 0 (id=1241): syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaddc721651a86dd6002000000343c0020010000000000000000000000000002fe80000000000000070800000000000000000708000000000000000005020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x74}}, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x6020400) 670.499947ms ago: executing program 4 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) 634.105705ms ago: executing program 4 (id=1243): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x0, 0x0, 0x2a8, 0x0, 0x1e8, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d4], 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x23, 0x6, @broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3f, 0x6, [0x1, 0x3a, 0x27, 0x16, 0x13, 0x2b, 0x26, 0xe, 0x2d, 0xa, 0x23, 0x22, 0xb, 0x25, 0x20, 0x2], 0x0, 0x0, 0x1}}}, {{@ip={@empty, @local, 0xff, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x16, 0x3, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "0d13", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@remote, @loopback, 0xff000000, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {0xff}, {}, 0x33, 0x2, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x9054}, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 276.714668ms ago: executing program 1 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 268.884154ms ago: executing program 4 (id=1245): sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 163.435932ms ago: executing program 3 (id=1246): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000308e9030000000000000000000000002c00048008000440000000220800054000000001080001400000000008000479aca219ede984b340000000000600024000000000050003002f000000"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001300a10000000000000000000b0000760000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000800900000004000000"], 0x4c}}, 0x4000040) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) getresgid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)) 1.34903ms ago: executing program 1 (id=1247): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa030000450000000000000000890000ffffffff00000000443400030000000000000000ac1414aa00000000e000000100000000ac1414bb00000000ac1e000100000000ffffffff00000000860900000000000334000000"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000020801010000000000000009000000f25225c1934320c1ec649e0005000005240004800800084000002a65080007400000013808"], 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="875b8029d93ec7c63d0c270fefb4126e6da83d2222a9264bac365d40809b097b1fe487920de009812e44e96b5edad8fa96fa76591c92bd6c0d1d90e7f43ccaf74c3022a3eab00563565c68ab982bcc95ad725237dd22a819a73d004d086cbebf13367737e52deb68743797f0fb0f1ae2f2b2", 0x72}, {&(0x7f0000000200)="3ab73627306174fde1d618384c48b72f42263c1cc8f95be816fc89504a742b5304ebf6e7973738bc79a5377112a1eb9efd006a109e73b7691358d0e32486556daa9e80f1f5599e1bfbaf4841726f", 0x4e}], 0x2) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/192, 0xc0}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000007700000077000000070000000600000000000009000000000000000000000003000000000300000005000000060000000a00000001000006040000000a000000010000000700000000000002020000000e0000000200000f030000000203000000000800fffffff24a7ee459b3d969d3d4ff2c7f0200000006000000000022375cf661f5493d000000000a"], &(0x7f0000000580)=""/152, 0x97, 0x98, 0x1, 0x2ac, 0x0, @void, @value}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0847040000000000580012800b00010065727370616e00004800028004001200060010004e20000008001500c736070008001400", @ANYRES32, @ANYBLOB="06001800ff7f000005001600de"], 0x80}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=1256): syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaddc721651a86dd6002000000343c0020010000000000000000000000000002fe80000000000000070800000000000000000708000000000000000005020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x74}}, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x6020400) kernel console output (not intermixed with test programs): 7548] veth0_macvtap: entered promiscuous mode [ 114.853849][ T7548] veth1_macvtap: entered promiscuous mode [ 114.863851][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.866670][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.873169][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.875845][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.878605][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.883458][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.886175][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.896110][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.899340][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 114.901863][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 114.905481][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.913231][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.916132][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.926814][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.930484][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.933147][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.936149][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.945476][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.948640][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.952710][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.967693][ T7548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.981884][ T7548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.984351][ T7548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.986810][ T7548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.994877][ T6449] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input3 [ 115.626107][ T6449] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 115.632961][ T6449] usb 1-1: USB disconnect, device number 2 [ 115.727507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.742103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.774320][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.776450][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.876899][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.882956][ T7895] loop3: detected capacity change from 0 to 256 [ 115.949503][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.691071][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 116.842537][ T7923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.397'. [ 118.412757][ T7946] __nla_validate_parse: 2 callbacks suppressed [ 118.412774][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 118.439278][ T7946] bond2: entered promiscuous mode [ 118.481081][ T7936] loop2: detected capacity change from 0 to 32768 [ 118.497411][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.407'. [ 118.526168][ T7936] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.558502][ T7958] loop1: detected capacity change from 0 to 512 [ 118.570274][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'. [ 118.572858][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 118.609219][ T7958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.646633][ T7958] EXT4-fs (loop1): 1 truncate cleaned up [ 118.663102][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.866134][ T7972] hub 6-0:1.0: USB hub found [ 118.868968][ T7972] hub 6-0:1.0: 8 ports detected [ 119.053991][ T7936] XFS (loop2): Ending clean mount [ 119.661206][ T7548] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.889136][ T7992] loop3: detected capacity change from 0 to 128 [ 119.979091][ T7992] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 120.044466][ T7992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.588933][ T30] audit: type=1326 audit(120.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x7ffc0000 [ 120.642162][ T30] audit: type=1326 audit(120.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x7ffc0000 [ 120.647098][ T30] audit: type=1326 audit(120.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=86 compat=0 ip=0xffff8fd49428 code=0x7ffc0000 [ 120.698225][ T30] audit: type=1326 audit(120.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x7ffc0000 [ 120.806670][ T6872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.038420][ T6405] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.045397][ T6405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.047718][ T6405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.060948][ T6405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.064968][ T6405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.067164][ T6405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.130468][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 121.132674][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 121.133293][ T7740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.137324][ T7740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.225848][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 121.260441][ T7740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.263281][ T7740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.390034][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 121.453024][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.842310][ T7740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.906218][ T7740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.104633][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.106473][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.118421][ T8011] bridge_slave_0: entered allmulticast mode [ 122.120754][ T8011] bridge_slave_0: entered promiscuous mode [ 122.134895][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.136786][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.138691][ T8011] bridge_slave_1: entered allmulticast mode [ 122.152555][ T8011] bridge_slave_1: entered promiscuous mode [ 123.668352][ T8047] loop2: detected capacity change from 0 to 128 [ 124.112934][ T6409] Bluetooth: hci2: command tx timeout [ 124.148224][ T7740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.153786][ T8047] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 124.170631][ T7740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.181506][ T8047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.214087][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.224201][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.243558][ T8011] team0: Port device team_slave_0 added [ 124.251296][ T8011] team0: Port device team_slave_1 added [ 124.265361][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.267226][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.274192][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.275870][ T8051] loop3: detected capacity change from 0 to 256 [ 124.278063][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.280423][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.289739][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.347498][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.437'. [ 124.370552][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 124.440681][ T8011] hsr_slave_0: entered promiscuous mode [ 124.476550][ T8011] hsr_slave_1: entered promiscuous mode [ 124.518981][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.526045][ T8011] Cannot create hsr debugfs directory [ 124.628437][ T7740] bridge_slave_1: left allmulticast mode [ 124.630807][ T7740] bridge_slave_1: left promiscuous mode [ 124.634762][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.647429][ T7740] bridge_slave_0: left allmulticast mode [ 124.699059][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 124.733327][ T7740] bridge_slave_0: left promiscuous mode [ 124.740138][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.811787][ T8087] loop4: detected capacity change from 0 to 128 [ 125.857805][ T8087] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 125.866598][ T8087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.923351][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939013][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.158904][ T6409] Bluetooth: hci2: command tx timeout [ 127.172673][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.236315][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.290873][ T7740] bond0 (unregistering): Released all slaves [ 127.297319][ T7740] bond1 (unregistering): Released all slaves [ 127.357572][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 127.360268][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 128.238862][ T6409] Bluetooth: hci2: command tx timeout [ 128.268129][ T8141] lo: entered promiscuous mode [ 128.347361][ T7740] hsr_slave_0: left promiscuous mode [ 128.391783][ T8150] loop2: detected capacity change from 0 to 1024 [ 128.398015][ T8150] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.410546][ T7740] hsr_slave_1: left promiscuous mode [ 128.413108][ T8150] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.417532][ T8150] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.421553][ T8150] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.462: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.433455][ T8150] EXT4-fs (loop2): 1 orphan inode deleted [ 128.435590][ T8150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.515613][ T7548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.521170][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.524353][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.535520][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.545088][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.597427][ T7740] veth1_macvtap: left promiscuous mode [ 128.603446][ T7740] veth0_macvtap: left promiscuous mode [ 128.608604][ T7740] veth1_vlan: left promiscuous mode [ 128.615680][ T7740] veth0_vlan: left promiscuous mode [ 128.806590][ T8170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.468'. [ 128.810754][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 128.816097][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 129.564928][ T8187] loop3: detected capacity change from 0 to 1764 [ 130.318897][ T6409] Bluetooth: hci2: command tx timeout [ 131.058105][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 131.282065][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 133.561995][ T8011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.619346][ T8011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.623366][ T8011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.637144][ T8011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.716675][ T8208] loop3: detected capacity change from 0 to 8 [ 133.718570][ T8208] squashfs: Unknown parameter 'filter' [ 134.537447][ T8215] Falling back ldisc for ptm0. [ 134.739824][ T8220] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071563247616) [ 134.742315][ T8220] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 134.759329][ T6449] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.608585][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 135.611468][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 135.693557][ T6449] usb 1-1: Using ep0 maxpacket: 16 [ 135.696372][ T6449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.699498][ T6449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.702102][ T6449] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.705442][ T6449] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.707658][ T6449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.711279][ T6449] usb 1-1: config 0 descriptor?? [ 136.136057][ T6449] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input4 [ 136.193963][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.237903][ T6449] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 136.247268][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.271828][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.273895][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.279835][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.281610][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.338441][ T6449] usb 1-1: USB disconnect, device number 3 [ 136.394858][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.496973][ T8247] loop4: detected capacity change from 0 to 8 [ 136.508439][ T8247] squashfs: Unknown parameter 'filter' [ 136.519956][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.565610][ T8011] veth0_vlan: entered promiscuous mode [ 136.578194][ T8011] veth1_vlan: entered promiscuous mode [ 136.606678][ T8011] veth0_macvtap: entered promiscuous mode [ 136.626076][ T8011] veth1_macvtap: entered promiscuous mode [ 136.637471][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.641074][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.643638][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.646439][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.654981][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.657685][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.660869][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.663409][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.666855][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.675976][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.689323][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.691660][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.703478][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.706079][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.708549][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.711612][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.714524][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.717648][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.723107][ T8011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.725381][ T8011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.727422][ T8011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.729747][ T8011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.796862][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.804773][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.814471][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.816891][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.913930][ T8265] futex_wake_op: syz.4.494 tries to shift op by 32; fix this program [ 137.936659][ T8272] hub 6-0:1.0: USB hub found [ 137.940466][ T8272] hub 6-0:1.0: 8 ports detected [ 139.134418][ T8289] loop1: detected capacity change from 0 to 8 [ 139.157297][ T8289] squashfs: Unknown parameter 'filter' [ 139.225082][ T8296] loop4: detected capacity change from 0 to 64 [ 139.876488][ T8305] loop1: detected capacity change from 0 to 128 [ 141.231529][ T8335] hub 6-0:1.0: USB hub found [ 141.232609][ T8335] hub 6-0:1.0: 8 ports detected [ 142.059367][ T8337] loop2: detected capacity change from 0 to 8 [ 142.059689][ T8337] squashfs: Unknown parameter 'filter' [ 143.075137][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.138975][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.311073][ T8376] loop3: detected capacity change from 0 to 8 [ 143.311437][ T8376] squashfs: Unknown parameter 'filter' [ 143.658817][ T8387] hub 6-0:1.0: USB hub found [ 143.660539][ T8387] hub 6-0:1.0: 8 ports detected [ 144.605916][ T8390] loop2: detected capacity change from 0 to 1024 [ 144.653778][ T8390] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 144.656626][ T8390] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.821579][ T8390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.216250][ T8415] netlink: 'syz.1.547': attribute type 21 has an invalid length. [ 145.222119][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 145.224395][ T8415] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 145.291699][ T8417] loop3: detected capacity change from 0 to 8 [ 145.292133][ T8417] squashfs: Unknown parameter 'filter' [ 145.491992][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.539002][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.588987][ T7548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.644507][ T8419] loop1: detected capacity change from 0 to 32768 [ 145.680444][ T8419] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.699154][ T8419] XFS (loop1): Ending clean mount [ 145.914935][ T8011] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.748375][ T8448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.748483][ T8448] IPv6: NLM_F_CREATE should be set when creating new route [ 146.748502][ T8448] IPv6: NLM_F_CREATE should be set when creating new route [ 146.779636][ T8453] loop0: detected capacity change from 0 to 8 [ 146.779964][ T8453] squashfs: Unknown parameter 'filter' [ 146.869782][ T8454] loop3: detected capacity change from 0 to 512 [ 146.898021][ T8454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.683326][ T8454] EXT4-fs (loop3): 1 truncate cleaned up [ 148.683720][ T8454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.950230][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.072264][ T8487] netlink: 277 bytes leftover after parsing attributes in process `syz.1.570'. [ 151.247773][ T8466] loop0: detected capacity change from 0 to 32768 [ 151.290619][ T8466] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.565 (8466) [ 151.306461][ T8466] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.318024][ T8466] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 151.326229][ T8466] BTRFS info (device loop0): using free-space-tree [ 152.391699][ T8518] loop4: detected capacity change from 0 to 8 [ 152.392074][ T8518] squashfs: Unknown parameter 'filter' [ 152.532284][ T6395] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 154.071932][ T8537] loop1: detected capacity change from 0 to 128 [ 154.119103][ T8537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 154.129219][ T8537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.170515][ T8541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.584'. [ 155.200681][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 155.337897][ T8557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'. [ 155.341106][ T8557] netlink: 172 bytes leftover after parsing attributes in process `syz.2.589'. [ 155.358886][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 156.020489][ T8565] loop4: detected capacity change from 0 to 64 [ 156.032300][ T8561] loop0: detected capacity change from 0 to 8 [ 156.037008][ T8561] squashfs: Unknown parameter 'filter' [ 157.444198][ T8583] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 157.505780][ T6396] hfs: node 4:3 still has 1 user(s)! [ 158.204535][ T8595] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.298825][ T6409] Bluetooth: hci3: command 0x0406 tx timeout [ 159.301504][ T6405] Bluetooth: hci1: command 0x0406 tx timeout [ 159.413479][ T8599] loop3: detected capacity change from 0 to 16 [ 159.423342][ T8599] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.658422][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.663316][ T8614] loop0: detected capacity change from 0 to 8 [ 160.663649][ T8614] squashfs: Unknown parameter 'filter' [ 160.759705][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.440078][ T8623] loop3: detected capacity change from 0 to 512 [ 161.449519][ T8623] ext4: Unknown parameter 'fsmagic' [ 162.285179][ T8633] hub 9-0:1.0: USB hub found [ 162.286804][ T8633] hub 9-0:1.0: 8 ports detected [ 163.990429][ T8649] loop2: detected capacity change from 0 to 128 [ 164.212331][ T8649] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 164.216074][ T8649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.325135][ T8656] loop1: detected capacity change from 0 to 8 [ 164.325511][ T8656] squashfs: Unknown parameter 'filter' [ 165.617893][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.738988][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.971295][ T8693] loop0: detected capacity change from 0 to 8 [ 165.973788][ T8693] squashfs: Unknown parameter 'filter' [ 166.138051][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 167.486673][ T44] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 167.577119][ T8714] usb usb8: usbfs: process 8714 (syz.3.640) did not claim interface 0 before use [ 168.114985][ T8716] netlink: 'syz.0.643': attribute type 3 has an invalid length. [ 168.117116][ T8716] netlink: 666 bytes leftover after parsing attributes in process `syz.0.643'. [ 168.120769][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.211014][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.259722][ T8708] futex_wake_op: syz.1.642 tries to shift op by 32; fix this program [ 168.364761][ T8728] loop3: detected capacity change from 0 to 512 [ 168.369173][ T8728] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.370880][ T8728] EXT4-fs: Ignoring removed i_version option [ 168.388026][ T8724] loop4: detected capacity change from 0 to 8 [ 168.390171][ T8724] squashfs: Unknown parameter 'filter' [ 168.966854][ T8728] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.648: invalid block [ 169.012429][ T8728] EXT4-fs (loop3): Remounting filesystem read-only [ 169.452107][ T8728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.749698][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.081376][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.125625][ T44] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 170.263991][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.352372][ T8751] x_tables: duplicate underflow at hook 1 [ 170.430130][ T6447] IPVS: starting estimator thread 0... [ 170.540435][ T8755] IPVS: using max 25 ests per chain, 60000 per kthread [ 170.920999][ T8751] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 170.931152][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 171.051643][ T8762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 171.059104][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 171.088076][ T8764] loop2: detected capacity change from 0 to 2048 [ 171.100856][ T8764] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 171.169161][ T8744] loop4: detected capacity change from 0 to 32768 [ 171.185886][ T8744] *** Log Format Error ! *** [ 171.187622][ T8744] lmLogInit: exit(-22) [ 171.188677][ T8744] lmLogOpen: exit(-22) [ 171.200366][ T8744] jfs_mount_rw failed, return code = -22 [ 171.951644][ T8772] loop3: detected capacity change from 0 to 8 [ 171.951981][ T8772] squashfs: Unknown parameter 'filter' [ 172.019160][ T8776] loop1: detected capacity change from 0 to 16 [ 172.032699][ T44] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 172.034718][ T8776] erofs: (device loop1): mounted with root inode @ nid 36. [ 172.085811][ T8776] syz.1.665: attempt to access beyond end of device [ 172.085811][ T8776] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 172.119381][ T8776] syz.1.665: attempt to access beyond end of device [ 172.119381][ T8776] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 172.141243][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.669'. [ 172.160345][ T8791] EXT4-fs warning (device nvme0n1p2): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 172.289119][ T6447] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.366827][ T8801] loop4: detected capacity change from 0 to 1024 [ 172.381064][ T8801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 172.383368][ T8801] System zones: 0-1, 3-36 [ 172.385456][ T8801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.468124][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.540602][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 172.549146][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.560107][ T6447] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.563415][ T6447] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 172.565845][ T6447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.570303][ T6447] usb 1-1: config 0 descriptor?? [ 172.573630][ T6447] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 173.221887][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.374843][ T5983] usb 1-1: USB disconnect, device number 4 [ 173.449181][ T8812] loop4: detected capacity change from 0 to 8 [ 173.451065][ T8812] squashfs: Unknown parameter 'filter' [ 173.493328][ T44] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 174.519789][ T8839] loop3: detected capacity change from 0 to 8 [ 174.522017][ T8839] squashfs: Unknown parameter 'filter' [ 174.583159][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 174.623673][ T8848] loop4: detected capacity change from 0 to 512 [ 174.671942][ T8848] EXT4-fs (loop4): Test dummy encryption mode enabled [ 174.687410][ T8848] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.696: corrupted in-inode xattr: invalid ea_ino [ 174.693689][ T8848] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.696: couldn't read orphan inode 12 (err -117) [ 174.697824][ T8848] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.948899][ T8858] xt_socket: unknown flags 0x50 [ 175.196813][ T30] audit: type=1326 audit(175.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.698" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a549428 code=0x0 [ 175.721854][ T6396] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 176.459047][ T8883] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad) [ 176.460814][ T8883] PKCS7: Only support pkcs7_signedData type [ 176.568233][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 177.649555][ T8909] loop4: detected capacity change from 0 to 128 [ 177.662966][ T8909] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 177.674253][ T8909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.804141][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 177.861515][ T6449] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.091768][ T6449] usb 1-1: Using ep0 maxpacket: 16 [ 178.156218][ T6449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.163632][ T6449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.168496][ T6449] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.179535][ T6449] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.183191][ T6449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.239777][ T6449] usb 1-1: config 0 descriptor?? [ 178.385569][ T8912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.715'. [ 178.426506][ T8914] tmpfs: Unknown parameter 'hge' [ 178.537104][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 178.549321][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.718'. [ 178.594200][ T8923] loop4: detected capacity change from 0 to 512 [ 178.596818][ T8923] ext4: Unknown parameter 'fsmagic' [ 178.666332][ T6449] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input5 [ 178.759059][ T6449] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 178.772818][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.790596][ T8925] tmpfs: Bad value for 'mpol' [ 178.811682][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.111982][ T8929] loop4: detected capacity change from 0 to 4096 [ 179.401918][ T2241] usb 1-1: USB disconnect, device number 5 [ 179.455490][ T8932] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.645513][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 182.354236][ T5963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.357961][ T5963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.363645][ T5963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.366800][ T5963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.369470][ T5963] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.371620][ T5963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.700931][ T8981] loop2: detected capacity change from 0 to 512 [ 182.703175][ T8981] EXT4-fs: quotafile must be on filesystem root [ 182.774589][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 182.971569][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.020344][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.031042][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 183.851900][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.880350][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.882264][ T8978] bridge_slave_0: entered allmulticast mode [ 183.888863][ T8978] bridge_slave_0: entered promiscuous mode [ 183.899118][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.908999][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.911100][ T8978] bridge_slave_1: entered allmulticast mode [ 183.922514][ T8978] bridge_slave_1: entered promiscuous mode [ 183.998265][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.014739][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.068003][ T8978] team0: Port device team_slave_0 added [ 184.082760][ T8978] team0: Port device team_slave_1 added [ 184.400213][ T5963] Bluetooth: hci5: command tx timeout [ 184.462620][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 184.665824][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.704321][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.711830][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.715627][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.717654][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.728385][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.746884][ T30] audit: type=1326 audit(184.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9021 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9749428 code=0x7ffc0000 [ 184.796304][ T30] audit: type=1326 audit(184.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9021 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9749428 code=0x7ffc0000 [ 184.812880][ T30] audit: type=1326 audit(184.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9021 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffffb9749428 code=0x7ffc0000 [ 184.818223][ T30] audit: type=1326 audit(184.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9021 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9749428 code=0x7ffc0000 [ 184.842670][ T30] audit: type=1326 audit(184.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9021 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9749428 code=0x7ffc0000 [ 184.894065][ T8978] hsr_slave_0: entered promiscuous mode [ 185.186624][ T8978] hsr_slave_1: entered promiscuous mode [ 185.313320][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.326460][ T8978] Cannot create hsr debugfs directory [ 186.229216][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.478892][ T5963] Bluetooth: hci5: command tx timeout [ 186.499965][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.505063][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.508528][ T10] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 186.556392][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.678310][ T8978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.696480][ T10] usb 1-1: config 0 descriptor?? [ 187.855193][ T9055] loop3: detected capacity change from 0 to 512 [ 187.875827][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.878994][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.896209][ T9055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.937827][ T9055] EXT4-fs (loop3): 1 truncate cleaned up [ 187.940116][ T9055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.992102][ T30] audit: type=1326 audit(187.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9047 comm="syz.3.765" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x0 [ 188.393067][ T8978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.416681][ T9060] netlink: 'syz.2.767': attribute type 5 has an invalid length. [ 188.477196][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.517749][ T10] elo 0003:04E7:0030.0004: item fetching failed at offset 2/5 [ 188.520394][ T10] elo 0003:04E7:0030.0004: parse failed [ 188.522024][ T10] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 188.558843][ T5963] Bluetooth: hci5: command tx timeout [ 188.618564][ T8978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.633954][ T9069] loop2: detected capacity change from 0 to 256 [ 188.639147][ T493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.723032][ T2241] usb 1-1: USB disconnect, device number 6 [ 188.756557][ T8978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.825064][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 188.937543][ T8978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.943989][ T8978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.952282][ T8978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.968259][ T8978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.038521][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.054156][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.061072][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.063170][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.075348][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.077457][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.324781][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.444094][ T8978] veth0_vlan: entered promiscuous mode [ 190.084645][ T9087] loop0: detected capacity change from 0 to 32768 [ 190.395648][ T9087] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.480772][ T8978] veth1_vlan: entered promiscuous mode [ 190.527689][ T9087] XFS (loop0): Ending clean mount [ 190.556047][ T9087] XFS (loop0): Quotacheck needed: Please wait. [ 190.578394][ T8978] veth0_macvtap: entered promiscuous mode [ 190.591087][ T8978] veth1_macvtap: entered promiscuous mode [ 190.603353][ T9087] XFS (loop0): Quotacheck: Done. [ 190.638826][ T5963] Bluetooth: hci5: command tx timeout [ 190.664672][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.672169][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.676914][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.686234][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.693235][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.700747][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.706686][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.712630][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.718330][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.738911][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.744293][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.858098][ T6395] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.918889][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.993654][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.082635][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.124568][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.183707][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.285483][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.364575][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.443783][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.464134][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.474832][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.484841][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.563811][ T8978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.566320][ T8978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.568606][ T8978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.573366][ T8978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.779915][ T9116] loop2: detected capacity change from 0 to 512 [ 191.873480][ T9116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.974800][ T2241] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.985487][ T9116] EXT4-fs (loop2): 1 truncate cleaned up [ 191.997479][ T9116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.106557][ T30] audit: type=1326 audit(192.090:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9109 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9749428 code=0x0 [ 192.309072][ T2241] usb 1-1: device descriptor read/64, error -71 [ 192.323725][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.327989][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.385186][ T518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.387244][ T518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.410964][ T7548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.420540][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.785'. [ 192.583880][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 192.780592][ T9136] IPVS: Error joining to the multicast group [ 193.427342][ T2241] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.579867][ T2241] usb 1-1: device descriptor read/64, error -71 [ 193.699094][ T2241] usb usb1-port1: attempt power cycle [ 194.347208][ T2241] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.565873][ T2241] usb 1-1: device descriptor read/8, error -71 [ 195.586417][ T9163] loop3: detected capacity change from 0 to 1024 [ 195.641065][ T9163] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 195.668903][ T9163] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 195.696995][ T9163] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: inode #32: comm syz.3.797: iget: special inode unallocated [ 195.725814][ T9163] EXT4-fs (loop3): no journal found [ 195.727108][ T9163] EXT4-fs (loop3): can't get journal size [ 195.748133][ T9163] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.797: iget: special inode unallocated [ 195.771436][ T9163] EXT4-fs (loop3): failed to initialize system zone (-117) [ 195.773265][ T9163] EXT4-fs (loop3): mount failed [ 196.383184][ T9174] binder: BINDER_SET_CONTEXT_MGR already set [ 196.385141][ T9174] binder: 9170:9174 ioctl 4018620d 20000040 returned -16 [ 196.387825][ T9174] binder: 9170:9174 got transaction to invalid handle, 1 [ 196.390265][ T9174] binder: 9174:9170 cannot find target node [ 196.391774][ T9174] binder: 9170:9174 transaction call to 0:0 failed 4/29201/-22, size 72-24 line 3144 [ 196.394780][ T9174] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.548735][ C0] sched: RT throttling activated [ 196.958438][ T9182] loop2: detected capacity change from 0 to 512 [ 196.975585][ T9182] ext4: Unknown parameter 'noacl' [ 198.175155][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.243637][ T9201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.269329][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.449470][ T9208] loop4: detected capacity change from 0 to 512 [ 198.503707][ T9208] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.594081][ T9208] EXT4-fs (loop4): 1 truncate cleaned up [ 198.598898][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.056416][ T9215] loop3: detected capacity change from 0 to 512 [ 199.058600][ T9215] EXT4-fs: Ignoring removed oldalloc option [ 199.073693][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.115217][ T9215] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.814: Parent and EA inode have the same ino 15 [ 199.170830][ T9217] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.173151][ T9215] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.198003][ T9215] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.814: Parent and EA inode have the same ino 15 [ 199.223153][ T9215] EXT4-fs (loop3): 1 orphan inode deleted [ 199.231313][ T9215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.260535][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.299536][ T9254] block device autoloading is deprecated and will be removed. [ 204.340156][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 204.342563][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 206.922511][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 208.090786][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 208.290642][ T9361] loop4: detected capacity change from 0 to 128 [ 208.304515][ T9361] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 208.313120][ T9361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.155062][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.449138][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.513765][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.518029][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.521201][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.524381][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.526616][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.529396][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.500957][ T9371] loop4: detected capacity change from 0 to 262144 [ 211.644171][ T9371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.663334][ T9371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.035327][ T9377] chnl_net:caif_netlink_parms(): no params data found [ 212.186695][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.191272][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.198958][ T9377] bridge_slave_0: entered allmulticast mode [ 212.203653][ T9377] bridge_slave_0: entered promiscuous mode [ 212.223513][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.227239][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.236390][ T9377] bridge_slave_1: entered allmulticast mode [ 212.243161][ T9377] bridge_slave_1: entered promiscuous mode [ 212.301290][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.312657][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.344310][ T9377] team0: Port device team_slave_0 added [ 212.347138][ T9377] team0: Port device team_slave_1 added [ 212.376221][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.378025][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.404196][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.411657][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.413462][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.432418][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.521310][ T9377] hsr_slave_0: entered promiscuous mode [ 212.559229][ T54] Bluetooth: hci6: command tx timeout [ 212.562112][ T9377] hsr_slave_1: entered promiscuous mode [ 212.576888][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 212.619127][ T9377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.622596][ T9377] Cannot create hsr debugfs directory [ 212.894357][ T9377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.042010][ T9415] loop4: detected capacity change from 0 to 128 [ 213.051009][ T9415] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 213.060587][ T9415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.559051][ T9377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.923878][ T9377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.045624][ T9436] loop3: detected capacity change from 0 to 512 [ 214.166562][ T9436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.295240][ T9436] EXT4-fs (loop3): 1 truncate cleaned up [ 214.299907][ T9436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.359080][ T30] audit: type=1326 audit(214.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9425 comm="syz.3.884" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x0 [ 214.675815][ T54] Bluetooth: hci6: command tx timeout [ 214.680630][ T9377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.681234][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.803293][ T9452] loop3: detected capacity change from 0 to 8192 [ 214.916929][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 215.120672][ T9377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.124969][ T9377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.128415][ T9377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.133821][ T9377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.786158][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.803297][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.808978][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.810911][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.969516][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.971449][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.081531][ T9377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.223874][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.289502][ T9377] veth0_vlan: entered promiscuous mode [ 216.312696][ T9377] veth1_vlan: entered promiscuous mode [ 216.344622][ T9377] veth0_macvtap: entered promiscuous mode [ 216.347790][ T9377] veth1_macvtap: entered promiscuous mode [ 216.386957][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.411518][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.413868][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.416323][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.430417][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.444593][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.447295][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.474192][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.476671][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.497840][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.521784][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.524431][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.527908][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.566039][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.591050][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.597495][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.616576][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.631100][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.642210][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.651402][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.668869][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.759515][ T54] Bluetooth: hci6: command tx timeout [ 216.765187][ T9485] loop4: detected capacity change from 0 to 512 [ 216.784459][ T9485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.848034][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.133685][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.147153][ T9377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.151347][ T9377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.347679][ T9485] EXT4-fs (loop4): 1 truncate cleaned up [ 217.351628][ T9485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.415434][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.759088][ T30] audit: type=1326 audit(2000000000.430:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9477 comm="syz.4.900" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x0 [ 217.768035][ T9377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.787797][ T9377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.797914][ T9377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.808335][ T9377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.883352][ T9493] tipc: Started in network mode [ 217.884706][ T9493] tipc: Node identity f7, cluster identity 4711 [ 217.886259][ T9493] tipc: Node number set to 247 [ 217.961408][ T7730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.963447][ T7730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.017231][ T518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.024186][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.026707][ T518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.034168][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 218.345661][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.375243][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.880101][ T5963] Bluetooth: hci6: command tx timeout [ 218.947449][ T9498] syz.1.905 (9498): drop_caches: 2 [ 218.973714][ T9495] syz.1.905 (9495): drop_caches: 2 [ 221.004730][ T5963] Bluetooth: hci4: command 0x0406 tx timeout [ 221.019732][ T30] audit: type=1326 audit(2000000003.820:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9522 comm="syz.1.915" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92749428 code=0x0 [ 221.215534][ T30] audit: type=1326 audit(2000000004.230:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x7ffc0000 [ 221.221120][ T30] audit: type=1326 audit(2000000004.230:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x7ffc0000 [ 221.226298][ T30] audit: type=1326 audit(2000000004.230:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffff83349428 code=0x7ffc0000 [ 221.249299][ T30] audit: type=1326 audit(2000000004.230:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x7ffc0000 [ 221.259169][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 221.525462][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 222.257630][ T9577] loop4: detected capacity change from 0 to 512 [ 222.278690][ T9577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.305017][ T9577] EXT4-fs (loop4): 1 truncate cleaned up [ 222.317805][ T9577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.353423][ T9564] 9pnet_fd: Insufficient options for proto=fd [ 222.385405][ T30] audit: type=1326 audit(2000000005.370:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.4.932" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x0 [ 222.903120][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.903795][ T9583] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 223.941584][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 224.109815][ T9596] loop2: detected capacity change from 0 to 32768 [ 224.133420][ T9596] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.192449][ T9596] XFS (loop2): Ending clean mount [ 224.209470][ T9596] XFS (loop2): Quotacheck needed: Please wait. [ 224.265643][ T9596] XFS (loop2): Quotacheck: Done. [ 224.729540][ T9377] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.167100][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 226.438369][ T9649] loop0: detected capacity change from 0 to 32768 [ 226.510750][ T9649] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.616416][ T9649] XFS (loop0): Ending clean mount [ 226.631314][ T9649] XFS (loop0): Quotacheck needed: Please wait. [ 226.707338][ T9649] XFS (loop0): Quotacheck: Done. [ 226.723502][ T9684] loop3: detected capacity change from 0 to 1024 [ 226.833795][ T6395] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.119763][ T9691] loop0: detected capacity change from 0 to 1024 [ 227.121858][ T9691] EXT4-fs: Ignoring removed orlov option [ 227.145691][ T9691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.185273][ T9698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 227.207497][ T6395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.390100][ T9684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.431871][ T30] audit: type=1326 audit(2000000010.470:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9706 comm="syz.1.979" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92749428 code=0x0 [ 227.472685][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 228.457750][ T9713] loop4: detected capacity change from 0 to 40427 [ 228.499598][ T9713] F2FS-fs (loop4): Unrecognized mount option "lazytime" or missing value [ 228.582918][ T9731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 230.107909][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 230.181496][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 230.416553][ T30] audit: type=1326 audit(2000000013.450:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9749 comm="syz.1.995" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92749428 code=0x0 [ 231.986011][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 232.584557][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 233.002174][ T9798] loop3: detected capacity change from 0 to 512 [ 233.036208][ T9798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.141315][ T9798] EXT4-fs (loop3): 1 truncate cleaned up [ 233.146010][ T9798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.235395][ T30] audit: type=1326 audit(2000000016.220:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.3.1009" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83349428 code=0x0 [ 233.715337][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.791316][ T9812] loop4: detected capacity change from 0 to 128 [ 233.795901][ T9812] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 233.799653][ T9812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.987299][ T9823] kAFS: unable to lookup cell '/' [ 234.839837][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 236.079312][ T518] wlan1: Trigger new scan to find an IBSS to join [ 236.103155][ T9862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1035'. [ 236.156937][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 236.361649][ T9875] loop3: detected capacity change from 0 to 128 [ 236.368799][ T9875] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 236.374679][ T9875] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 236.438908][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.489416][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.531398][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.568937][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.572790][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1040'. [ 236.859648][ T9891] sctp: [Deprecated]: syz.1.1043 (pid 9891) Use of int in maxseg socket option. [ 236.859648][ T9891] Use struct sctp_assoc_value instead [ 238.178342][ T9911] futex_wake_op: syz.4.1049 tries to shift op by 32; fix this program [ 239.157744][ T9919] loop4: detected capacity change from 0 to 8 [ 239.164883][ T9919] squashfs: Unknown parameter 'filter' [ 239.166265][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'. [ 240.312511][ T9939] loop3: detected capacity change from 0 to 128 [ 240.324285][ T9939] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 240.349462][ T9939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.498490][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 240.504510][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 240.514928][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 240.527700][ T9949] bridge_slave_1: left allmulticast mode [ 240.536359][ T9949] bridge_slave_1: left promiscuous mode [ 240.546959][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.706365][ T9949] bridge_slave_0: left allmulticast mode [ 240.727353][ T9949] bridge_slave_0: left promiscuous mode [ 240.777781][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.569506][ T9958] loop3: detected capacity change from 0 to 8 [ 241.608391][ T9958] squashfs: Unknown parameter 'filter' [ 241.746536][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1067'. [ 241.948199][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.441656][ T9967] xt_cgroup: path and classid specified [ 242.556760][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.896901][ T30] audit: type=1326 audit(2000000026.930:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9986 comm="syz.2.1076" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4f49428 code=0x0 [ 244.097335][ T9990] loop3: detected capacity change from 0 to 1024 [ 244.109511][ T9990] hfsplus: unable to parse mount options [ 244.138579][ T9990] loop3: detected capacity change from 0 to 2048 [ 244.141066][ T9990] udf: Unknown parameter '0xffffffffffffffff˙˙1844674407370955161518446744073709551615' [ 244.151070][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1078'. [ 244.153441][ T9992] tipc: Failed to obtain node identity [ 244.154840][ T9992] tipc: Enabling of bearer rejected, failed to enable media [ 244.928249][ T9998] loop0: detected capacity change from 0 to 8 [ 244.951867][ T9998] squashfs: Unknown parameter 'filter' [ 245.125473][T10004] loop2: detected capacity change from 0 to 512 [ 245.132667][T10004] journal_path: Lookup failure for './file0' [ 245.134198][T10004] EXT4-fs: error: could not find journal device path [ 245.758894][ T5963] Bluetooth: hci2: command 0x0406 tx timeout [ 245.826032][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1081'. [ 246.063538][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1086'. [ 247.195461][T10037] random: crng reseeded on system resumption [ 248.879786][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.882218][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.003243][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.018342][T10057] loop0: detected capacity change from 0 to 256 [ 249.032100][T10057] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 249.035024][T10057] exFAT-fs (loop0): invalid boot region [ 249.036554][T10057] exFAT-fs (loop0): failed to recognize exfat type [ 249.049522][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.196824][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'. [ 252.138623][T10088] bridge: RTM_NEWNEIGH with invalid ether address [ 252.172534][T10090] loop4: detected capacity change from 0 to 2048 [ 252.249481][T10095] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.267693][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.359806][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.419043][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.440878][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.627494][T10106] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 253.248194][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 253.311461][T10114] syzkaller0: entered promiscuous mode [ 253.312926][T10114] syzkaller0: entered allmulticast mode [ 253.996697][T10095] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 254.000458][T10095] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 254.056476][T10095] Remounting filesystem read-only [ 254.063035][ T45] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 254.064984][ T45] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 254.071331][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.076182][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.101659][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.110414][ T45] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 254.112359][ T45] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 254.114221][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.116406][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.118579][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.232811][ T45] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 254.234605][ T45] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 254.236311][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.238408][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.267789][ T45] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.276289][ T6396] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 254.279875][ T6396] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 254.281665][ T6396] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 254.283497][ T6396] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 254.285285][ T6396] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 254.287194][ T6396] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 254.295975][ T6396] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 254.297809][ T6396] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 254.300804][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.318987][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.321418][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.325302][ T6396] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 254.327052][ T6396] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 254.337456][ T6396] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 254.349860][ T6396] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 254.351943][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.407440][ T6396] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 254.457233][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.479762][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.530233][ T6396] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 254.554126][ T6396] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 256.233276][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.269149][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.356033][ T5963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.362715][ T5963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.368060][ T5963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.370870][ T5963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.373288][ T5963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.375458][ T5963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.413867][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 263.418420][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 263.421426][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 263.423896][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 263.427168][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 263.431315][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 264.341156][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 264.344676][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 264.347502][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 264.365055][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 264.368244][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 264.371985][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 265.448926][ T54] Bluetooth: hci7: command tx timeout [ 265.519001][ T54] Bluetooth: hci8: command tx timeout [ 266.353708][ T5963] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 266.356802][ T5963] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 266.365053][ T5963] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 266.367787][ T5963] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 266.378506][ T5963] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 266.388944][ T5963] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 266.408952][ T54] Bluetooth: hci9: command tx timeout [ 267.518872][ T54] Bluetooth: hci7: command tx timeout [ 267.598883][ T54] Bluetooth: hci8: command tx timeout [ 268.479122][ T54] Bluetooth: hci9: command tx timeout [ 268.482921][ T54] Bluetooth: hci10: command tx timeout [ 269.617870][ T5963] Bluetooth: hci7: command tx timeout [ 269.679341][ T5963] Bluetooth: hci8: command tx timeout [ 269.710980][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.755660][T10171] chnl_net:caif_netlink_parms(): no params data found [ 269.763127][T10164] chnl_net:caif_netlink_parms(): no params data found [ 269.820431][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.834960][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.875706][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.950418][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.966929][T10174] chnl_net:caif_netlink_parms(): no params data found [ 269.970446][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.972223][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.974044][T10171] bridge_slave_0: entered allmulticast mode [ 269.976224][T10171] bridge_slave_0: entered promiscuous mode [ 270.028203][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.030143][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.032028][T10171] bridge_slave_1: entered allmulticast mode [ 270.034049][T10171] bridge_slave_1: entered promiscuous mode [ 270.091362][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.110067][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.111919][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.113860][T10164] bridge_slave_0: entered allmulticast mode [ 270.116213][T10164] bridge_slave_0: entered promiscuous mode [ 270.140449][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.142196][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.144133][T10164] bridge_slave_1: entered allmulticast mode [ 270.151352][T10164] bridge_slave_1: entered promiscuous mode [ 270.179562][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.181388][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.183336][T10174] bridge_slave_0: entered allmulticast mode [ 270.185481][T10174] bridge_slave_0: entered promiscuous mode [ 270.200870][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.204791][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.211016][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.212754][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.214635][T10174] bridge_slave_1: entered allmulticast mode [ 270.216672][T10174] bridge_slave_1: entered promiscuous mode [ 270.237228][T10164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.250847][T10164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.264298][T10167] chnl_net:caif_netlink_parms(): no params data found [ 270.279351][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.284590][T10171] team0: Port device team_slave_0 added [ 270.288278][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.309155][T10171] team0: Port device team_slave_1 added [ 270.330162][T10164] team0: Port device team_slave_0 added [ 270.333853][T10164] team0: Port device team_slave_1 added [ 270.365845][T10174] team0: Port device team_slave_0 added [ 270.411008][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.412902][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.427042][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.438701][T10174] team0: Port device team_slave_1 added [ 270.456313][T10164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.458196][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.465463][T10164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.480292][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.482054][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.488127][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.506485][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.508439][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.522202][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.526742][T10164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.528612][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.537813][T10164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.544546][ T45] bridge_slave_1: left allmulticast mode [ 270.545931][ T45] bridge_slave_1: left promiscuous mode [ 270.547442][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.559226][ T5963] Bluetooth: hci10: command tx timeout [ 270.560578][ T5963] Bluetooth: hci9: command tx timeout [ 270.563017][ T45] bridge_slave_0: left allmulticast mode [ 270.564418][ T45] bridge_slave_0: left promiscuous mode [ 270.565888][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.812862][T10222] loop4: detected capacity change from 0 to 512 [ 270.820525][T10222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.893289][T10222] EXT4-fs (loop4): 1 truncate cleaned up [ 270.897625][T10222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.960441][ T30] audit: type=1326 audit(2000000053.970:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10218 comm="syz.4.1138" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd49428 code=0x0 [ 271.400718][ T45] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 271.402400][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.439924][ T45] ip6gretap1 (unregistering): left promiscuous mode [ 271.688908][ T54] Bluetooth: hci7: command tx timeout [ 271.758943][ T54] Bluetooth: hci8: command tx timeout [ 272.639002][ T5963] Bluetooth: hci10: command tx timeout [ 272.640520][ T54] Bluetooth: hci9: command tx timeout [ 272.951714][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.993912][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.041849][ T45] bond0 (unregistering): Released all slaves [ 273.047364][ T45] bond1 (unregistering): Released all slaves [ 273.053182][ T45] bond2 (unregistering): Released all slaves [ 273.065701][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.067678][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.075100][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.124853][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.126720][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.129283][T10167] bridge_slave_0: entered allmulticast mode [ 273.131565][T10167] bridge_slave_0: entered promiscuous mode [ 273.134966][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.137008][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.139392][T10167] bridge_slave_1: entered allmulticast mode [ 273.141389][T10167] bridge_slave_1: entered promiscuous mode [ 273.147927][ T45] tipc: Disabling bearer [ 273.161816][ T45] tipc: Left network mode [ 273.321030][T10171] hsr_slave_0: entered promiscuous mode [ 273.324462][ T45] IPVS: stopping backup sync thread 6633 ... [ 273.389362][T10171] hsr_slave_1: entered promiscuous mode [ 273.918452][T10171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.964442][T10171] Cannot create hsr debugfs directory [ 274.040950][T10174] hsr_slave_0: entered promiscuous mode [ 274.119456][T10174] hsr_slave_1: entered promiscuous mode [ 274.248952][T10174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.250942][T10174] Cannot create hsr debugfs directory [ 274.265370][T10167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.269922][T10167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.672348][T10164] hsr_slave_0: entered promiscuous mode [ 274.719134][ T54] Bluetooth: hci10: command tx timeout [ 274.748306][T10164] hsr_slave_1: entered promiscuous mode [ 274.859597][T10164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.869988][T10164] Cannot create hsr debugfs directory [ 274.908068][T10167] team0: Port device team_slave_0 added [ 274.985912][T10167] team0: Port device team_slave_1 added [ 275.075626][T10167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.077370][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.089652][T10167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.132990][T10167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.134830][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.141606][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.265446][T10242] veth0_vlan: entered allmulticast mode [ 275.339710][T10243] ˙˙˙˙˙˙: renamed from vlan0 [ 275.417918][ T45] hsr_slave_0: left promiscuous mode [ 275.529490][ T45] hsr_slave_1: left promiscuous mode [ 275.707741][T10247] vhci_hcd: invalid port number 97 [ 275.709255][T10247] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 275.774169][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.815803][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.912405][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.937921][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.163597][ T45] veth1_macvtap: left promiscuous mode [ 276.165161][ T45] veth0_macvtap: left promiscuous mode [ 276.166695][ T45] veth1_vlan: left promiscuous mode [ 276.168052][ T45] veth0_vlan: left promiscuous mode [ 278.144609][ T45] team0 (unregistering): Port device team_slave_1 removed [ 278.341788][ T45] team0 (unregistering): Port device team_slave_0 removed [ 280.802155][T10167] hsr_slave_0: entered promiscuous mode [ 280.850112][T10167] hsr_slave_1: entered promiscuous mode [ 281.142871][T10268] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 281.603004][ T45] IPVS: stop unused estimator thread 0... [ 281.723406][T10164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.842597][T10164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.950963][T10164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.054785][T10164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.356515][T10174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.364973][T10164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.368823][T10164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.372293][T10164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.379622][T10164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.484457][T10174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.517568][T10164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.527339][T10164] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.581565][T10174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.586706][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.588549][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.600335][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.602218][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.662161][T10174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.736553][T10164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.767458][T10164] veth0_vlan: entered promiscuous mode [ 282.775177][T10164] veth1_vlan: entered promiscuous mode [ 282.791224][T10164] veth0_macvtap: entered promiscuous mode [ 282.795217][T10164] veth1_macvtap: entered promiscuous mode [ 282.804485][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.807413][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.810581][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.813464][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.816290][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.819607][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.822296][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.825042][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.827743][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.830712][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.833256][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.836088][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.840720][T10164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.922273][T10167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.939455][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.942363][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.944809][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.947415][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.950091][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.952841][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.955372][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.957907][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.960593][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.963195][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.965517][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.968075][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.972721][T10164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.978406][T10164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.981325][T10164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.983495][T10164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.985677][T10164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.071484][T10167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.098441][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.103179][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.124319][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.126539][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.195111][T10167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.406628][T10167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.451415][T10328] loop4: detected capacity change from 0 to 128 [ 283.459865][T10328] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 283.473239][T10328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.157337][T10171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.163105][T10171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.168514][T10171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.215156][T10171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.310078][T10174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.366235][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.396888][T10174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.426821][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.440654][T10174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.445306][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.454072][T10174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.472295][T10167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.476166][T10167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.489397][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.513286][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.566680][T10341] trusted_key: encrypted_key: insufficient parameters specified [ 284.655866][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.872477][T10167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.081491][T10167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.105897][T10171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.162015][T10171] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.176179][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.178115][ T7730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.203387][ T30] audit: type=1326 audit(2000000068.240:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10342 comm="syz.0.1153" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d49428 code=0x0 [ 285.224839][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.226730][ T7730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.257144][T10171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.260629][T10171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.274985][T10167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.294963][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.316235][T10167] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.321693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.323596][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.332832][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.350718][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.352698][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.355526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.357486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.363241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.365209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.428280][T10167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.432009][T10167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.456628][T10171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.515307][T10171] veth0_vlan: entered promiscuous mode [ 285.527963][T10171] veth1_vlan: entered promiscuous mode [ 285.563802][T10171] veth0_macvtap: entered promiscuous mode [ 285.568341][T10171] veth1_macvtap: entered promiscuous mode [ 285.578051][T10167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.592998][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.596003][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.600390][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.607569][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.618030][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.627689][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.634066][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.638091][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.641247][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.643921][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.646583][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.650213][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.653227][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.655866][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.659900][T10171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.672965][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.679670][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.682335][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.685171][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.687964][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.690570][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.693197][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.695750][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.698216][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.701693][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.704489][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.706802][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.709725][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.712241][T10171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.714780][T10171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.718331][T10171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.733772][T10171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.736056][T10171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.738673][T10171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.741053][T10171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.760326][T10167] veth0_vlan: entered promiscuous mode [ 285.765702][T10167] veth1_vlan: entered promiscuous mode [ 285.836782][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.844983][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.846378][T10167] veth0_macvtap: entered promiscuous mode [ 285.876382][T10167] veth1_macvtap: entered promiscuous mode [ 285.882811][T10174] veth0_vlan: entered promiscuous mode [ 285.890143][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.892899][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.905768][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.908461][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.912297][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.914994][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.917659][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.920640][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.923042][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.925572][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.928153][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.931343][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.933879][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.936557][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.940946][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.943871][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.946564][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.950963][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.955037][T10167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.967795][T10174] veth1_vlan: entered promiscuous mode [ 285.975010][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.982501][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.988528][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.994895][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.998115][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.002231][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.005006][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.008043][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.109053][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.111687][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.114157][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.125745][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.128383][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.132550][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.135123][T10167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.137885][T10167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.145291][T10167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.156766][T10167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.167147][T10167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.170095][T10167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.172507][T10167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.185913][T10174] veth0_macvtap: entered promiscuous mode [ 286.228103][T10174] veth1_macvtap: entered promiscuous mode [ 286.802588][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.805402][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.807884][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.810619][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.818830][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.821231][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.823459][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.825842][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.828150][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.834540][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.837943][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.848148][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.850958][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.853522][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.855865][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.858385][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.861775][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.864333][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.867906][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.897660][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.900635][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.903096][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.905728][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.908163][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.911041][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.913641][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.916264][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.919651][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.922207][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.924629][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.927190][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.930479][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.933308][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.935778][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.938253][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.941190][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.943748][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.947274][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.995833][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.997799][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.779829][T10174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.782141][T10174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.784151][T10174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.786226][T10174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.903325][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.905919][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.180732][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.251370][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.293519][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.295545][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.310912][T10386] loop0: detected capacity change from 0 to 128 [ 289.325632][T10386] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 289.338025][T10386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.356562][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.359248][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.380556][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 293.367095][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 293.728992][ T6478] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 293.969743][ T6478] usb 1-1: Using ep0 maxpacket: 16 [ 294.026078][ T6478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.067993][ T6478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.175301][ T6478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.182071][ T6478] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.187755][ T6478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.201814][ T6478] usb 1-1: config 0 descriptor?? [ 296.356108][T10430] tipc: Started in network mode [ 296.495651][T10430] tipc: Node identity 0a747970655f6c65, cluster identity 4711 [ 296.505720][T10430] tipc: Enabling of bearer rejected, failed to enable media [ 296.899638][ T6478] usbhid 1-1:0.0: can't add hid device: -71 [ 296.901849][ T6478] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 296.908534][ T6478] usb 1-1: USB disconnect, device number 11 [ 297.797751][T10440] loop0: detected capacity change from 0 to 16 [ 297.813301][T10440] erofs: (device loop0): mounted with root inode @ nid 36. [ 297.843827][T10440] syz.0.1177: attempt to access beyond end of device [ 297.843827][T10440] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 297.870849][T10440] syz.0.1177: attempt to access beyond end of device [ 297.870849][T10440] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 297.899836][T10445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1176'. [ 297.920899][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 300.779887][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 303.812637][T10480] loop0: detected capacity change from 0 to 1024 [ 305.739561][T10480] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 305.739969][T10480] EXT4-fs: failed to create workqueue [ 305.744015][T10480] EXT4-fs (loop0): mount failed [ 305.900907][ T6386] IPVS: starting estimator thread 0... [ 305.991917][T10490] IPVS: using max 27 ests per chain, 64800 per kthread [ 306.034294][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1192'. [ 306.050800][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 307.184346][T10509] loop4: detected capacity change from 0 to 128 [ 307.212103][T10509] 9pnet_virtio: no channels available for device 127.0.0.1 [ 307.400718][ T30] audit: type=1326 audit(2000000003.590:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10505 comm="syz.0.1198" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d49428 code=0x0 [ 310.324227][T10520] loop0: detected capacity change from 0 to 4096 [ 310.347625][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.349550][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.365855][T10520] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 310.486415][T10520] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 310.695223][T10529] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 310.806989][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.813563][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.816433][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.819031][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.822491][ T5963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.824538][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.495588][T10542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1211'. [ 311.498079][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 311.994355][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.192420][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.392887][T10531] chnl_net:caif_netlink_parms(): no params data found [ 312.632548][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.636537][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.638482][T10531] bridge_slave_0: entered allmulticast mode [ 312.659908][T10531] bridge_slave_0: entered promiscuous mode [ 312.666561][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.678509][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.683115][T10531] bridge_slave_1: entered allmulticast mode [ 312.686819][T10531] bridge_slave_1: entered promiscuous mode [ 314.030513][ T54] Bluetooth: hci0: command tx timeout [ 314.073955][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.135630][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.197921][T10531] team0: Port device team_slave_0 added [ 314.240735][T10531] team0: Port device team_slave_1 added [ 314.487963][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.490547][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.499083][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.820672][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.867554][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.071284][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.240422][T10531] hsr_slave_0: entered promiscuous mode [ 315.301960][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'. [ 315.307731][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 315.345854][T10590] 9pnet_fd: Insufficient options for proto=fd [ 315.354706][T10531] hsr_slave_1: entered promiscuous mode [ 315.389685][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.391668][T10531] Cannot create hsr debugfs directory [ 315.437851][T10593] random: crng reseeded on system resumption [ 315.753220][T10531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.963952][T10531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.079376][ T54] Bluetooth: hci0: command tx timeout [ 316.220412][T10531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.897792][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.979116][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.121365][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 318.178938][ T54] Bluetooth: hci0: command tx timeout [ 318.249903][T10531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.326707][T10531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.379077][T10531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.388236][T10531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.402023][T10531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.240094][ T54] Bluetooth: hci0: command tx timeout [ 320.307056][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1240'. [ 320.315213][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 320.416545][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.658240][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.737182][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.739016][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.769419][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.771216][ T518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.794229][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.850032][T10531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.890085][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.983338][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.034777][T10531] veth0_vlan: entered promiscuous mode [ 321.040297][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 321.042789][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 321.050342][T10531] veth1_vlan: entered promiscuous mode [ 321.063607][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 321.069133][T10659] bridge_slave_1: left allmulticast mode [ 321.070736][T10659] bridge_slave_1: left promiscuous mode [ 321.072143][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.082385][T10659] bridge_slave_0: left allmulticast mode [ 321.083966][T10659] bridge_slave_0: left promiscuous mode [ 321.095985][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.139256][ T31] INFO: task syz.1.665:8776 blocked for more than 144 seconds. [ 321.142069][ T31] Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0 [ 321.155224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.164995][ T31] task:syz.1.665 state:D stack:0 pid:8776 tgid:8775 ppid:8011 flags:0x00000009 [ 321.174840][ T31] Call trace: [ 321.175883][ T31] __switch_to+0x418/0x658 [ 321.176941][ T31] __schedule+0x13d4/0x2418 [ 321.178120][ T31] schedule+0xbc/0x238 [ 321.190523][ T31] io_schedule+0x8c/0x124 [ 321.191733][ T31] folio_wait_bit_common+0x65c/0xb90 [ 321.193113][ T31] __folio_lock+0x2c/0x3c [ 321.200451][ T31] z_erofs_runqueue+0x838/0x17ec [ 321.203981][ T31] z_erofs_readahead+0x858/0xc18 [ 321.206392][ T31] read_pages+0x160/0x694 [ 321.208612][ T31] page_cache_ra_unbounded+0x484/0x584 [ 321.213549][ T31] force_page_cache_ra+0x22c/0x290 [ 321.216316][ T31] generic_fadvise+0x3e8/0x6a0 [ 321.218517][ T31] __arm64_sys_fadvise64_64+0x12c/0x174 [ 321.220645][ T31] invoke_syscall+0x98/0x2b8 [ 321.224043][ T31] el0_svc_common+0x130/0x23c [ 321.227536][ T31] do_el0_svc+0x48/0x58 [ 321.229919][ T31] el0_svc+0x54/0x168 [ 321.232170][ T31] el0t_64_sync_handler+0x84/0xfc [ 321.235689][ T31] el0t_64_sync+0x190/0x194 [ 321.238175][ T31] [ 321.238175][ T31] Showing all locks held in the system: [ 321.242221][ T31] 1 lock held by khungtaskd/31: [ 321.243628][ T31] #0: ffff80008f6edba0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 321.246201][ T31] 3 locks held by kworker/u8:3/45: [ 321.247700][ T31] #0: ffff0000d1f24948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 321.251991][ T31] #1: ffff800094b37c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 321.255312][ T31] #2: ffff8000923b6ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 321.257915][ T31] 2 locks held by getty/6157: [ 321.260095][ T31] #0: ffff0000cb6db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 321.262898][ T31] #1: ffff8000983ab2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 321.265652][ T31] 3 locks held by kworker/0:4/6386: [ 321.267191][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 321.271241][ T31] #1: ffff8000a14e7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 321.274727][ T31] #2: ffff0000ecbd0240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 321.277548][ T31] 3 locks held by kworker/1:3/6447: [ 321.280110][ T31] #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 [ 321.283210][ T31] #1: ffff80009a4b7c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 [ 321.286224][ T31] #2: ffff8000923b6ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 321.288659][ T31] 1 lock held by syz.1.665/8776: [ 321.291034][ T31] #0: ffff0000ee9dcdd0 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xc8/0x584 [ 321.294440][ T31] 1 lock held by syz.2.1174/10447: [ 321.295958][ T31] 1 lock held by syz-executor/10531: [ 321.298328][ T31] #0: ffff8000923b6ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 321.301799][ T31] 1 lock held by syz.1.1247/10659: [ 321.303315][ T31] #0: ffff8000923b6ce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 321.306208][ T31] [ 321.306827][ T31] ============================================= [ 321.306827][ T31] [ 321.309807][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 321.311691][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0 [ 321.314274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.316825][ T31] Call trace: [ 321.317660][ T31] dump_backtrace+0x1b8/0x1e4 [ 321.318837][ T31] show_stack+0x2c/0x3c [ 321.319984][ T31] dump_stack_lvl+0xe4/0x150 [ 321.321238][ T31] dump_stack+0x1c/0x28 [ 321.322426][ T31] panic+0x300/0x884 [ 321.323446][ T31] hung_task_panic+0x0/0x2c [ 321.324598][ T31] kthread+0x288/0x310 [ 321.325607][ T31] ret_from_fork+0x10/0x20 [ 321.326771][ T31] SMP: stopping secondary CPUs [ 321.328030][ T31] Kernel Offset: disabled [ 321.329257][ T31] CPU features: 0x08,00000103,80100128,42017203 [ 321.330937][ T31] Memory Limit: none [ 322.163430][ T31] Rebooting in 86400 seconds..