last executing test programs: 2m22.965073326s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 2m22.874603031s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000680)=0x6, 0x4) 2m19.582796772s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m19.537011925s ago: executing program 32 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m14.144943417s ago: executing program 2 (id=76): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) syz_io_uring_setup(0x5d99, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x20040014) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000280)="17000000020001000003d68c5e007688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a49a91e75264ca593dba67e06018000f4fffff00607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2m13.447119048s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) 2m12.565027339s ago: executing program 2 (id=79): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 2m11.598731445s ago: executing program 2 (id=83): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x4, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) recvmmsg(0xffffffffffffffff, &(0x7f0000004900), 0x0, 0x20, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) syz_clone(0x4008000, 0x0, 0xfffffffffffffece, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) 2m11.396930567s ago: executing program 2 (id=85): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 2m10.935595523s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m10.869864208s ago: executing program 33 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.802971984s ago: executing program 4 (id=752): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 5.358800949s ago: executing program 5 (id=755): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf1"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x48810) close_range(r2, 0xffffffffffffffff, 0x0) 4.849710569s ago: executing program 4 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.460273851s ago: executing program 6 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) 3.78694439s ago: executing program 4 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) 3.425450991s ago: executing program 6 (id=767): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fchmod(r2, 0x15) 3.329795327s ago: executing program 1 (id=769): r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020600) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1842, 0x136) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) connect$can_j1939(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmsg$can_j1939(r1, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x2}}, 0x10) 3.329526747s ago: executing program 1 (id=770): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.314506418s ago: executing program 1 (id=771): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.93503738s ago: executing program 4 (id=773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88c0}, 0x4004) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x78f, &(0x7f0000000280)="$eJzs3M9rHFUcAPDvTLJJf0QTwYN6EKGFFko3SXNpT6YX8VIoFLzWkGxCyKRbspvaxEIbz0JtLgqC6N2jV6HUP8CbFBT8C4rWXMTLyuxuYpLdTZM2ydb084HJzHvz5n3fd2bz2IGdCeCV9V7+J4kYiIirETHYrE8joq++dSziXqPd2tM7k/mSRK127Y8kPyzWaoMbfSXN9cmoHxJvRcSjQsS5z1rjVpaW5yayrLTQLA9X528OV5aWz8/OT8yUZko3RscujVwcG7s4MrZvuZ7+6NLxBz9/sLr6yw/V++/2nk9ivJ53NHPbt0CbNM5JIca31BYOIlRXJbVnt+k9jIEAALCj/Ht+T3NdiMHo8S0NAAAAjpxafw0AAAA48pLo9ggAAACAg7X+O4D1Z3sP6jnYTp5cjoihdvF7688QRxyrPy17Yi3Z8mRC0jgMXsi9lYh4ON7m85c0P3/Pb2RbOXnB/th/D/P5Z7zd/JNuzD/RZv7pXX93wgt6crnxqdgpfk+H+e9quw6Pt1b9+M3bHV848GQl4p3edvGTjfhJh/gft+1xpaXm/urnDzrFr30XcaZt/smWWMPV/Dqsvx+iZ/P7IYanZ7PWf61N5+HRP2cf75T/iZb4SVKPmuyc/81OnW7z6dpfc53mkjz+2VON+D1b9qTbzn//lr152y+a40gj4kFznZdXt8U4Nf/rT62Rk3vr8ac6nP/21//Djfy/3WX+v3/ff3uXTQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAujYiBSNLixnaaFosRJyPizTiRZuVK9dx0efHGVL4vYigK6fRsVhqJiMFGOcnLo/Xt/8oXtpXHIuKN3443gs5mpeJkOZvqdvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsOBkRA5GkxYhII6J3x9Z9hzYuAAAAYJ8NtVYlkXRjJAAAAMBBaXP/DwAAABwxz3v/7ycCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB5cvXIlX2prT+9M5uWpW0uLc+Vb56dKlbni/OJkcbK8cLM4Uy7PZKXiZHn+Wf2lETF6KRZvD1dLlepwZWn5+nx58Ub1+uz8xEzpeqlwKFkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwVwP1JUmLEZHWt9O0WIx4LSKGopBMz2alkYh4PSIeDxb68/JotwcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvqssLc9NZFlp4f+4UetpJNHlYSQR0aXokUS8HNfildno9C8TsZd+7sbLfuG6PTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANANlaXluYksKy1Uuj0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuqlWq9WSiMiXM4OnB7bv70v+HqyvI+KTr699eXuiWl0Yzev/3KivftWsv7DpwLuHmQUAAAAcee/vpfH6ffr6fTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBuVZaW5yayrLSw+43+iNipTV9EbKmJlW5nCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPI9/AwAA//9OubbF") 2.882938123s ago: executing program 1 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) 2.839457986s ago: executing program 5 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0x6}, {0x1, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.812028297s ago: executing program 0 (id=776): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xa, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x200400, 0x4) 2.450810468s ago: executing program 6 (id=777): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x470bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@mblk_io_submit}, {@minixdf}, {@norecovery}, {@nodelalloc}, {@dax_inode}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$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") sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x6, 0x4) 2.354365194s ago: executing program 5 (id=778): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.051451072s ago: executing program 1 (id=779): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) 2.002934004s ago: executing program 4 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2.002591674s ago: executing program 0 (id=781): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@resgid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) syz_usb_connect$uac1(0x3, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902a20003010520600904000000010100000a240105000302010208240706020009930724080503000c0c24020502000501faff09030d2406020103040009000900060c2402050402060d0200eb01090401000001020000090401010101020000090501092000010740072501802604000904020000016f"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 1.261154837s ago: executing program 6 (id=782): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.222866929s ago: executing program 5 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x3c, 0x0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.178934442s ago: executing program 6 (id=784): openat$uhid(0xffffffffffffff9c, &(0x7f0000004080), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.178643002s ago: executing program 4 (id=785): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @empty, 0xfffffffe}, 0x1c) 1.114865636s ago: executing program 0 (id=786): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r5, 0x140}, &(0x7f0000000100)=0x8) 992.004693ms ago: executing program 0 (id=789): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 545.657949ms ago: executing program 6 (id=790): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x1b}, {0x5, 0x4, [{0xc9, 0x4, 0x81}, {0xc8, 0x1a, 0x9da}, {0xc8, 0xfff, 0xa7}, {0xc9, 0x9, 0xd}]}}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e943b0520"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 406.783347ms ago: executing program 0 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 362.567799ms ago: executing program 5 (id=792): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000000, 0x33d, 0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) write(r0, &(0x7f0000000480)="5ce4b8276f4832147f7137e672df16222c2758364453d053fbb2bd91e81e75df0e5122fa1b4fe0754adc40257eafaa4838fef39ef1c20714", 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0x8, 0x2180) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, r0, 0x1000, '\x00', r3, r7, 0x3, 0x4, 0x5}, 0x50) 0s ago: executing program 5 (id=793): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2a, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ve_1) entered blocking state [ 33.893479][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.900669][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.902088][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.908804][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.911249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.912741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.915357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.916429][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.917952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.936819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.938664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.940220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.941808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.943253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.955502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.956942][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.957978][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.968907][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.971344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.972787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.974688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.976837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.978242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.979640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.980859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.983765][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.986466][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.988954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.990471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.991807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.000634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.001864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.006312][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.020254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.021794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.027986][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.029532][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.030900][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.032293][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.033734][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.036942][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.038453][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.041793][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.046173][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.048116][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.049863][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.051406][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.052891][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.059093][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.062183][ T4321] device veth0_vlan entered promiscuous mode [ 34.069584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.071119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.072533][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.073585][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.083184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.085700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.087184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.088557][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.089989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.091405][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.092454][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.098899][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.100764][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.115149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.116677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.118039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.119490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.130463][ T4321] device veth1_vlan entered promiscuous mode [ 34.135315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.136752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.152197][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.153953][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.155482][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.156872][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.158268][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.159663][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.161005][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.162390][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.164862][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.166595][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.170027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.171442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.172652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.176608][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.182720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.184362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.186350][ T4326] device veth0_vlan entered promiscuous mode [ 34.187628][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.188989][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.191295][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.201242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.202820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.226673][ T4322] device veth0_vlan entered promiscuous mode [ 34.228899][ T4326] device veth1_vlan entered promiscuous mode [ 34.231597][ T4322] device veth1_vlan entered promiscuous mode [ 34.236521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.237992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.239512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.241029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.242509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.244774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.246355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.247979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.249386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.256834][ T4321] device veth0_macvtap entered promiscuous mode [ 34.259299][ T4321] device veth1_macvtap entered promiscuous mode [ 34.269805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.271362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.272739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.275610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.276804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.285476][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.287067][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.288590][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.290117][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.295877][ T4322] device veth0_macvtap entered promiscuous mode [ 34.298668][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.301425][ T4326] device veth0_macvtap entered promiscuous mode [ 34.305099][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.307255][ T4322] device veth1_macvtap entered promiscuous mode [ 34.309382][ T4326] device veth1_macvtap entered promiscuous mode [ 34.310740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.312200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.313566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.318292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.319699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.321211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.325074][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.328680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.330218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.333393][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.337404][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.338719][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.340059][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.355203][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.356813][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.358748][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.360919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.362471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.364001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.365257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.366470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.368144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.370000][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.371594][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.373758][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.377748][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.379254][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.380525][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.382009][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.384592][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.387304][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.388745][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.390235][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.391715][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.397196][ T4332] device veth0_vlan entered promiscuous mode [ 34.400082][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.401371][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402694][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.405190][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.407193][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.408730][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.424821][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.427667][ T4332] device veth1_vlan entered promiscuous mode [ 34.429754][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.431275][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.432574][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.456789][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.458350][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.459715][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.461259][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.463620][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.473473][ T4332] device veth0_macvtap entered promiscuous mode [ 34.477674][ T4332] device veth1_macvtap entered promiscuous mode [ 34.482231][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.483752][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.487869][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.489618][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.490986][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.492379][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.496008][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.497410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.498842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.500324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.501777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.503284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.506531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.507926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.509356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.510836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.515927][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.517275][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518583][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.519880][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.522747][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.524311][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.526293][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.532253][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.534229][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.535761][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.537311][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.538745][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.540257][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.542349][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.553422][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.555232][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.563596][ T4332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.567051][ T4332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.568479][ T4332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.569894][ T4332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.602039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.603658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.605732][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.606842][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.608382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.622354][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.623567][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.626881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.642194][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.642451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.643412][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.645641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.647680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.649122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.650535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.652031][ T4331] device veth0_vlan entered promiscuous mode [ 34.658524][ T4331] device veth1_vlan entered promiscuous mode [ 34.665781][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.667034][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.670889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.672344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.673741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.706708][ T4433] ======================================================= [ 34.706708][ T4433] WARNING: The mand mount option has been deprecated and [ 34.706708][ T4433] and is ignored by this kernel. Remove the mand [ 34.706708][ T4433] option from the mount to silence this warning. [ 34.706708][ T4433] ======================================================= [ 34.713657][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.716289][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.719578][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.720743][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.722504][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.723643][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.725666][ T4331] device veth0_macvtap entered promiscuous mode [ 34.728230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.729702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.761404][ T4331] device veth1_macvtap entered promiscuous mode [ 34.765576][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.775145][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.776384][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.777635][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.856383][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.857941][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.859436][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.860938][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.862365][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.870088][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.871633][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.873218][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.879638][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.881399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.882910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.888661][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.890244][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.891666][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.893188][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.895855][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.897540][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.899078][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.900587][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.902819][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.979644][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.990072][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.200318][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.201717][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.213671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.216240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.259226][ T4442] loop2: detected capacity change from 0 to 8 [ 35.266941][ T4442] SQUASHFS error: lzo decompression failed, data probably corrupt [ 35.268123][ T4442] SQUASHFS error: Failed to read block 0x91: -5 [ 35.269056][ T4442] SQUASHFS error: Unable to read metadata cache entry [8f] [ 35.270065][ T4442] SQUASHFS error: Unable to read inode 0x11f [ 35.295415][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.298774][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.302852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.317179][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.318425][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.319685][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.360711][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.694380][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 35.769128][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 35.770315][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 35.770335][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 35.784409][ T4446] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 35.830360][ T4449] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 35.867795][ T4454] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 35.891783][ T4458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.893017][ T4458] IPv6: NLM_F_CREATE should be set when creating new route [ 35.909064][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.172258][ T4462] binder: 4461:4462 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 36.407158][ T4472] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 36.451330][ T4477] binder: 4476:4477 tried to acquire reference to desc 0, got 1 instead [ 36.455309][ T4477] binder: 4476:4477 Release 1 refcount change on invalid ref 0 ret -22 [ 36.457529][ T4374] binder: release 4476:4477 transaction 6 out, still active [ 36.458719][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 36.468796][ T4374] binder: send failed reply for transaction 6, target dead [ 36.484989][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 36.515649][ T4472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 36.553160][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 36.561452][ T4485] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 36.625966][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 36.628929][ T4487] loop4: detected capacity change from 0 to 128 [ 36.660840][ T4487] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 36.680867][ T4487] netlink: 52 bytes leftover after parsing attributes in process `syz.4.21'. [ 36.686025][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 36.699429][ T4485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.742689][ T4485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.799088][ T4485] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 36.855634][ T4485] bond0 (unregistering): Released all slaves [ 36.861806][ T4498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26'. [ 36.939197][ T4501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'. [ 36.979998][ T4503] IPVS: fo: FWM 3 0x00000003 - no destination available [ 37.055547][ T4505] Zero length message leads to an empty skb [ 37.060695][ T4507] Illegal XDP return value 3431063593 on prog (id 3) dev syz_tun, expect packet loss! [ 37.097557][ T4509] tipc: Started in network mode [ 37.098677][ T4509] tipc: Node identity 4, cluster identity 4711 [ 37.099582][ T4509] tipc: Node number set to 4 [ 37.327949][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.340006][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.345661][ T4523] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 37.774122][ T4323] Bluetooth: hci4: command 0x040f tx timeout [ 37.783840][ T4323] Bluetooth: hci1: command 0x040f tx timeout [ 37.785042][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 37.786122][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 37.921258][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 38.167836][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.170310][ T4323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.172647][ T4323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.174920][ T4323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.176740][ T4323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.178048][ T4323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.299692][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.301791][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.302959][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.306332][ T4542] device bridge_slave_0 left promiscuous mode [ 38.307924][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.345113][ T4542] device bridge_slave_1 left promiscuous mode [ 38.346150][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.376920][ T27] audit: type=1326 audit(38.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.46" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x0 [ 38.385210][ T4542] bond0: (slave bond_slave_0): Releasing backup interface [ 38.428056][ T4542] bond0: (slave bond_slave_1): Releasing backup interface [ 38.452159][ T4552] fuse: Bad value for 'fd' [ 38.479256][ T4542] team0: Failed to send options change via netlink (err -105) [ 38.480619][ T4542] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 38.482607][ T4542] team0: Port device team_slave_0 removed [ 38.489367][ T4542] team0: Failed to send options change via netlink (err -105) [ 38.490736][ T4542] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 38.492648][ T4542] team0: Port device team_slave_1 removed [ 38.498077][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.499622][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.501504][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.502791][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.508648][ T4545] team0: Failed to send options change via netlink (err -105) [ 38.509807][ T4545] team0: Mode changed to "activebackup" [ 38.556535][ T4448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.571873][ T4560] tipc: Started in network mode [ 38.572806][ T4560] tipc: Node identity 4, cluster identity 4711 [ 38.573737][ T4560] tipc: Node number set to 4 [ 38.607191][ T4562] device syzkaller0 entered promiscuous mode [ 38.635431][ T4564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 38.865227][ T4539] chnl_net:caif_netlink_parms(): no params data found [ 38.905750][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.907006][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.908622][ T4539] device bridge_slave_0 entered promiscuous mode [ 38.910746][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.911830][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.913265][ T4539] device bridge_slave_1 entered promiscuous mode [ 38.922026][ T4539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.931807][ T4539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.939977][ T4539] team0: Port device team_slave_0 added [ 38.942054][ T4539] team0: Port device team_slave_1 added [ 38.951735][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.952900][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.957055][ T4539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.959559][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.960793][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.967922][ T4539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.028869][ T4539] device hsr_slave_0 entered promiscuous mode [ 39.067304][ T4539] device hsr_slave_1 entered promiscuous mode [ 39.087216][ T4539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.088399][ T4539] Cannot create hsr debugfs directory [ 39.131294][ T4539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.155144][ T4539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.185037][ T4539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.230529][ T4539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.287317][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.288867][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.290112][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.291184][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.313750][ T4539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.319120][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.320835][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.323017][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.329557][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.331002][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.334808][ T4539] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.339133][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.340750][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.341793][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.346028][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.347560][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.348627][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.358751][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.360441][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.363765][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.368281][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.371504][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.376367][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.458005][ T4539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.459991][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.461154][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.549723][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.563634][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.566428][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.568566][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.571341][ T4539] device veth0_vlan entered promiscuous mode [ 39.579920][ T4539] device veth1_vlan entered promiscuous mode [ 39.590707][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.592169][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.593603][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.600249][ T4539] device veth0_macvtap entered promiscuous mode [ 39.603757][ T4539] device veth1_macvtap entered promiscuous mode [ 39.610887][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.612567][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.617874][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.619701][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.621250][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.622828][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.637054][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.638829][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.641601][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.643664][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.648050][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.650929][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.652714][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.654755][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.656460][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.658316][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.660018][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.662699][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.665966][ T4539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.667493][ T4539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668994][ T4539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.670517][ T4539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.746105][ T4661] capability: warning: `syz.0.55' uses deprecated v2 capabilities in a way that may be insecure [ 39.874019][ T4323] Bluetooth: hci1: command 0x0419 tx timeout [ 39.875261][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 39.876408][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 39.877505][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 39.965344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.037709][ T4448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.090005][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.091350][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.126217][ T4448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.129496][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.137599][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.138892][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.140208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.245251][ T4448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.254460][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 40.313132][ T4675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.60'. [ 41.620782][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 41.649455][ T4692] device veth0_macvtap left promiscuous mode [ 41.744068][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.745395][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.746680][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.747938][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.749125][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.750330][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.751573][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.752782][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.753958][ T4716] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 41.763786][ C0] sched: RT throttling activated [ 42.333994][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 42.527139][ T27] audit: type=1326 audit(42.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.4.69" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x0 [ 42.631215][ T4733] device syzkaller0 entered promiscuous mode [ 42.657992][ T4731] batman_adv: batadv0: Adding interface: dummy0 [ 42.659058][ T4731] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.662984][ T4731] batman_adv: batadv0: Interface activated: dummy0 [ 42.671755][ T4741] net_ratelimit: 5267 callbacks suppressed [ 42.671767][ T4741] batadv0: mtu less than device minimum [ 42.677493][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.680539][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.683409][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.686361][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.689124][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.691970][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.694816][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.697622][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.700399][ T4741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.313742][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.315203][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.380838][ T4762] loop5: detected capacity change from 0 to 1024 [ 43.409940][ T4762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 44.433916][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 44.759151][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.041196][ T4742] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.042612][ T4742] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.044061][ T4742] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.045469][ T4742] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.074977][ T4806] loop2: detected capacity change from 0 to 1024 [ 46.113907][ T4718] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 46.130399][ T4793] loop4: detected capacity change from 0 to 32768 [ 46.146338][ T4793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.81 (4793) [ 46.190967][ T4809] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 46.192024][ T4809] hfsplus: xattr searching failed [ 46.193583][ T4809] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 46.198393][ T4809] hfsplus: xattr searching failed [ 46.199476][ T4806] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 46.200527][ T4806] hfsplus: xattr searching failed [ 46.222880][ T4793] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.224954][ T4793] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 46.226293][ T4793] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 46.227763][ T4793] BTRFS info (device loop4): trying to use backup root at mount time [ 46.228937][ T4793] BTRFS info (device loop4): using free space tree [ 46.233264][ T4811] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 46.250375][ T4332] hfsplus: bad catalog entry type [ 46.319096][ T4718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 46.320799][ T4718] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 46.321973][ T4718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.332390][ T4718] usb 1-1: config 0 descriptor?? [ 46.335832][ T4791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.382469][ T4777] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 46.389698][ T4793] BTRFS warning (device loop4): couldn't read tree root [ 46.390779][ T4793] BTRFS warning (device loop4): try to load backup roots slot 1 [ 46.393300][ T1573] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 46.397304][ T4793] BTRFS warning (device loop4): failed to read root (objectid=9): -5 [ 46.398530][ T4793] BTRFS warning (device loop4): try to load backup roots slot 2 [ 46.399995][ T4777] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 46.408174][ T4793] BTRFS warning (device loop4): couldn't read tree root [ 46.409544][ T4793] BTRFS warning (device loop4): try to load backup roots slot 3 [ 46.419493][ T4793] BTRFS warning (device loop4): global root 2 0 already exists [ 46.422281][ T4793] BTRFS error (device loop4): failed to load root extent [ 46.479133][ T4793] BTRFS error (device loop4): open_ctree failed: -22 [ 46.494180][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 46.678020][ T1605] hfsplus: b-tree write err: -5, ino 4 [ 46.751131][ T4718] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 46.831274][ T4323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 46.833155][ T4323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 46.836259][ T4323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 46.840269][ T4323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 46.841745][ T4323] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 46.843258][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 47.250129][ T4696] usb 1-1: USB disconnect, device number 2 [ 47.257885][ T4878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 47.288561][ T4852] chnl_net:caif_netlink_parms(): no params data found [ 47.355236][ T4448] device hsr_slave_0 left promiscuous mode [ 47.368130][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 47.385431][ T4448] device hsr_slave_1 left promiscuous mode [ 47.493979][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.495210][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.496782][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.497948][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.499375][ T4448] device bridge_slave_1 left promiscuous mode [ 47.501052][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.586030][ T27] audit: type=1326 audit(47.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.589873][ T27] audit: type=1326 audit(47.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.604925][ T27] audit: type=1326 audit(47.580:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.608438][ T27] audit: type=1326 audit(47.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.612035][ T27] audit: type=1326 audit(47.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.692502][ T4448] device bridge_slave_0 left promiscuous mode [ 47.709057][ T27] audit: type=1326 audit(47.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.817556][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.819725][ T27] audit: type=1326 audit(47.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.823018][ T27] audit: type=1326 audit(47.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.827529][ T27] audit: type=1326 audit(47.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.831009][ T27] audit: type=1326 audit(47.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7fc00000 [ 47.964147][ T4448] device veth1_macvtap left promiscuous mode [ 47.965221][ T4448] device veth0_macvtap left promiscuous mode [ 47.966159][ T4448] device veth1_vlan left promiscuous mode [ 47.967076][ T4448] device veth0_vlan left promiscuous mode [ 48.265992][ T4907] ptrace attach of "./syz-executor exec"[4331] was attempted by "./syz-executor exec"[4907] [ 48.907820][ T4916] loop0: detected capacity change from 0 to 2048 [ 48.915562][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 49.228717][ T4916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.928805][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 51.053981][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 51.576238][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 51.745209][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 51.914953][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.124320][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.144426][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 53.726256][ T4448] bond0 (unregistering): Released all slaves [ 54.042378][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.043578][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.045509][ T4852] device bridge_slave_0 entered promiscuous mode [ 54.048136][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.049316][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.050831][ T4852] device bridge_slave_1 entered promiscuous mode [ 54.062296][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.065186][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.073012][ T4852] team0: Port device team_slave_0 added [ 54.115339][ T4933] netlink: 'syz.1.106': attribute type 11 has an invalid length. [ 54.195169][ T4938] netlink: 'syz.1.106': attribute type 11 has an invalid length. [ 54.666862][ T4852] team0: Port device team_slave_1 added [ 54.683394][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 54.698660][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.699724][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.711038][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.716594][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.717666][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.724199][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.808705][ T4852] device hsr_slave_0 entered promiscuous mode [ 54.847343][ T4852] device hsr_slave_1 entered promiscuous mode [ 54.874138][ T4852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.875348][ T4852] Cannot create hsr debugfs directory [ 55.213858][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 55.401906][ T4852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 55.455398][ T4852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.496992][ T4852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 55.547663][ T4852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.038024][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 56.525547][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.535367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.536888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.540966][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.549384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.597351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.599711][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.600716][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.709504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.395965][ T5039] fuse: Bad value for 'fd' [ 57.445699][ T4448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.456449][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.458041][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.459406][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.460476][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.462021][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.482907][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.497944][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.500416][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.503461][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.511477][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.513036][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.521433][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.526014][ T4852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.528097][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.587374][ T4448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.591538][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.592974][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.595267][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.786292][ T5067] loop4: detected capacity change from 0 to 2048 [ 58.642887][ T5067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.952838][ T4448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.957738][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 59.200692][ T4448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.401867][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.403231][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.410025][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.598308][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.599953][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.610152][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.612334][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.616231][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.619770][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.623670][ T4852] device veth0_vlan entered promiscuous mode [ 59.630523][ T4852] device veth1_vlan entered promiscuous mode [ 59.642141][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.643641][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.648532][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.650217][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.818575][ T4852] device veth0_macvtap entered promiscuous mode [ 59.831340][ T4852] device veth1_macvtap entered promiscuous mode [ 59.952377][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.954826][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959851][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.961461][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.962942][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.040104][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.268371][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.367910][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.369545][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.370968][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.372325][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.377144][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.379887][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.382575][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.385526][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.388336][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.391057][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.396849][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.402119][ T4852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.405753][ T4852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.408097][ T4852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.409602][ T4852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.425489][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.427318][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.643365][ T5149] Invalid ELF header magic: != ELF [ 61.079723][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 61.447022][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.450496][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.526671][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.535887][ T4715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.538321][ T4715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.591589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.122298][ T5195] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 62.124151][ T5194] netlink: 'syz.5.157': attribute type 11 has an invalid length. [ 62.132650][ T5195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.150859][ T5194] netlink: 'syz.5.157': attribute type 11 has an invalid length. [ 62.222938][ T5195] bond1: (slave gretap1): making interface the new active one [ 62.226994][ T5207] binder: 5206:5207 tried to acquire reference to desc 0, got 1 instead [ 62.229031][ T5207] binder: 5206:5207 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.230427][ T5195] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.230972][ T5207] binder: 5207 RLIMIT_NICE not set [ 62.233166][ T5207] binder: 5207 RLIMIT_NICE not set [ 62.239429][ T5207] binder: 5207 RLIMIT_NICE not set [ 62.240557][ T5207] binder_alloc: 5206: binder_alloc_buf, no vma [ 62.247754][ T5207] binder: cannot allocate buffer: vma cleared, target dead or dying [ 62.247811][ T5207] binder: 5206:5207 transaction reply to 5206:5207 failed 18/29189/-3, size 0-0 line 3230 [ 62.251087][ T5207] binder: send failed reply for transaction 17 to 5206:5207 [ 62.263307][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 62.264511][ T4445] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.293619][ T14] binder: undelivered TRANSACTION_ERROR: 29190 [ 62.758301][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 63.182438][ T5220] device vlan2 entered promiscuous mode [ 63.253300][ T5249] ptrace attach of "./syz-executor exec"[4852] was attempted by "./syz-executor exec"[5249] [ 63.551878][ T4448] device hsr_slave_0 left promiscuous mode [ 63.587690][ T4448] device hsr_slave_1 left promiscuous mode [ 63.694444][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.696003][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.697607][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.698862][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.845621][ T4448] device bridge_slave_1 left promiscuous mode [ 63.893655][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.026782][ T4448] device bridge_slave_0 left promiscuous mode [ 64.027990][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.122160][ T5274] binder: 5273:5274 tried to acquire reference to desc 0, got 1 instead [ 64.127349][ T5274] binder: 5273:5274 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.129804][ T5274] binder: 5274 RLIMIT_NICE not set [ 64.130611][ T5274] binder: 5274 RLIMIT_NICE not set [ 64.131897][ T5274] binder: 5274 RLIMIT_NICE not set [ 64.132923][ T5274] binder_alloc: 5273: binder_alloc_buf, no vma [ 64.134348][ T5274] binder: cannot allocate buffer: vma cleared, target dead or dying [ 64.134369][ T5274] binder: 5273:5274 transaction reply to 5273:5274 failed 24/29189/-3, size 0-0 line 3230 [ 64.137263][ T5274] binder: send failed reply for transaction 23 to 5273:5274 [ 64.140778][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 64.214717][ T4448] device veth1_macvtap left promiscuous mode [ 64.215924][ T4448] device veth0_macvtap left promiscuous mode [ 64.216934][ T4448] device veth1_vlan left promiscuous mode [ 64.218070][ T4448] device veth0_vlan left promiscuous mode [ 64.238403][ T5278] ptrace attach of "./syz-executor exec"[4322] was attempted by "./syz-executor exec"[5278] [ 64.542402][ T110] cfg80211: failed to load regulatory.db [ 64.551174][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.552470][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.188510][ T4430] kernel write not supported for file [eventfd] (pid: 4430 comm: kworker/1:9) [ 66.680229][ T5306] net_ratelimit: 10 callbacks suppressed [ 66.681091][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.682384][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.683577][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.684847][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.685986][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.687130][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.688311][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.689515][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.690694][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.691867][ T5306] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 68.403915][ T5331] fuse: Bad value for 'fd' [ 70.037661][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 70.204570][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 72.244520][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.180'. [ 72.247444][ T5310] device macvlan2 entered promiscuous mode [ 72.304118][ T5338] netlink: 'syz.5.189': attribute type 10 has an invalid length. [ 72.305360][ T5338] netlink: 40 bytes leftover after parsing attributes in process `syz.5.189'. [ 72.825809][ T5338] team0: Port device geneve0 added [ 72.830178][ T5356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 72.833124][ T5356] device ip6gre1 entered promiscuous mode [ 72.895954][ T5356] netlink: 'syz.4.192': attribute type 6 has an invalid length. [ 72.897320][ T5356] netlink: 72 bytes leftover after parsing attributes in process `syz.4.192'. [ 72.902101][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.197'. [ 72.909638][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.197'. [ 74.269546][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 74.348263][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.203'. [ 74.366366][ T5397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.203'. [ 75.458229][ T5431] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 75.499219][ T5431] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 75.527757][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 75.527768][ T27] audit: type=1326 audit(75.510:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.533551][ T27] audit: type=1326 audit(75.510:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.544039][ T27] audit: type=1326 audit(75.520:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.547346][ T27] audit: type=1326 audit(75.520:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaf15a32c code=0x7ffc0000 [ 75.550509][ T27] audit: type=1326 audit(75.520:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaf15a32c code=0x7ffc0000 [ 75.599353][ T27] audit: type=1326 audit(75.520:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.599396][ T5438] loop5: detected capacity change from 0 to 8192 [ 75.602594][ T27] audit: type=1326 audit(75.520:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.626840][ T27] audit: type=1326 audit(75.520:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.648121][ T5449] loop4: detected capacity change from 0 to 512 [ 75.650061][ T27] audit: type=1326 audit(75.520:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.670611][ T27] audit: type=1326 audit(75.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaf177368 code=0x7ffc0000 [ 75.683354][ T5456] netlink: 'syz.6.215': attribute type 10 has an invalid length. [ 75.690090][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.691439][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.708910][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.710062][ T5456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.711822][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.713011][ T5456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.716971][ T5456] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.717613][ T5449] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.216: invalid indirect mapped block 10 (level 1) [ 75.718605][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 75.727770][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 75.732387][ T5449] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.216: invalid indirect mapped block 8 (level 1) [ 75.755821][ T5449] EXT4-fs (loop4): 1 truncate cleaned up [ 75.756875][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.773428][ T5438] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 75.783055][ T5438] FAT-fs (loop5): Filesystem has been set read-only [ 75.791207][ T5438] overlayfs: unrecognized mount option "mask=MAY_APPEND" or missing value [ 75.847892][ T5461] loop6: detected capacity change from 0 to 256 [ 75.880225][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 75.881763][ T5461] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 77.010188][ T5506] netlink: 'syz.6.229': attribute type 10 has an invalid length. [ 77.018286][ T5506] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 78.661339][ T5515] netlink: 'syz.1.230': attribute type 10 has an invalid length. [ 78.668731][ T5515] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.770951][ T5545] loop0: detected capacity change from 0 to 1024 [ 78.776532][ T5525] loop4: detected capacity change from 0 to 8192 [ 78.839117][ T5543] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 78.853047][ T5545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.865614][ T5543] netlink: 'syz.1.236': attribute type 17 has an invalid length. [ 78.872172][ T5546] dns_resolver: Unsupported server list version (0) [ 78.911104][ T5525] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 78.912545][ T5525] FAT-fs (loop4): Filesystem has been set read-only [ 78.920252][ T5525] overlayfs: unrecognized mount option "mask=MAY_APPEND" or missing value [ 78.952411][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 79.031607][ T5573] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 79.047850][ T5573] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 79.288868][ T5586] __nla_validate_parse: 2 callbacks suppressed [ 79.288888][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 79.841530][ T5615] netlink: 'syz.5.248': attribute type 10 has an invalid length. [ 79.843273][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.844512][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.856596][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.857741][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.858946][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.860027][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.863359][ T5615] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.834879][ T5635] loop4: detected capacity change from 0 to 128 [ 80.855150][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.253'. [ 80.868363][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.253'. [ 80.876192][ T5635] hpfs: Bad version 183,140. Mount readonly to go around [ 80.879519][ T5635] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 82.184718][ T5652] block nbd5: shutting down sockets [ 82.918245][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.260'. [ 83.260415][ T5688] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 83.275914][ T5688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.058824][ T5676] loop5: detected capacity change from 0 to 32768 [ 84.070793][ T5676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.261 (5676) [ 84.133350][ T5676] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.138866][ T5676] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 84.140447][ T5676] BTRFS info (device loop5): allowing degraded mounts [ 84.141477][ T5676] BTRFS info (device loop5): enabling auto defrag [ 84.142496][ T5676] BTRFS info (device loop5): using free space tree [ 85.143083][ T5676] BTRFS info (device loop5): enabling ssd optimizations [ 86.009190][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.273'. [ 86.014739][ T5735] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.016129][ T5735] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.017430][ T5735] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.018696][ T5735] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.028607][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.273'. [ 86.049327][ T4539] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.291753][ T5774] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 86.308988][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.310312][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.778113][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.779380][ T5774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.780786][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.781869][ T5774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.785061][ T5774] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.557348][ T5820] loop6: detected capacity change from 0 to 128 [ 88.638431][ T5820] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 89.224358][ T5833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 89.250009][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 90.249235][ T4852] EXT4-fs (loop6): unmounting filesystem. [ 90.310181][ T5840] bond1: option mode: unable to set because the bond device has slaves [ 90.346390][ T5840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.348989][ T5843] Bluetooth: MGMT ver 1.22 [ 90.358965][ T5840] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 90.668874][ T5852] cgroup: No subsys list or none specified [ 91.220920][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 91.220930][ T27] audit: type=1326 audit(91.200:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.4.300" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x0 [ 92.188275][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.189917][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.219927][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.221441][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.096699][ T5940] loop0: detected capacity change from 0 to 2048 [ 93.126103][ T5940] loop0: p1 p3 p4 [ 93.139866][ T5940] loop0: p4 size 589824 extends beyond EOD, truncated [ 93.220293][ T5949] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 93.221441][ T5949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 93.223393][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236151][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.237529][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.238889][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.264268][ T5949] team0: Port device geneve0 added [ 93.350876][ T5342] udevd[5342]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.356903][ T5341] udevd[5341]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 93.360249][ T5340] udevd[5340]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.060760][ T5996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.183739][ T6009] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.828477][ T6042] netlink: 'syz.6.330': attribute type 10 has an invalid length. [ 95.829953][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.6.330'. [ 96.241470][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.243567][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.245883][ T4327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.247375][ T4327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.248768][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.249940][ T4327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.548797][ T6081] device syzkaller0 entered promiscuous mode [ 96.666104][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.766406][ T6093] netlink: 'syz.1.337': attribute type 13 has an invalid length. [ 96.789463][ T6093] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.790937][ T6093] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.792365][ T6093] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.793647][ T6093] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.336176][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.439318][ T6120] binder: 6119:6120 tried to acquire reference to desc 0, got 1 instead [ 97.446704][ T6120] binder: 6119 invalid dec weak, ref 35 desc 3 s 1 w 0 [ 97.452267][ T14] binder_debug: 2 callbacks suppressed [ 97.452278][ T14] binder: release 6119:6120 transaction 29 out, still active [ 97.457875][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.462181][ T14] binder: undelivered TRANSACTION_COMPLETE [ 97.471256][ T6125] loop5: detected capacity change from 0 to 2048 [ 97.490237][ T14] binder: send failed reply for transaction 29, target dead [ 97.519029][ T6125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.531660][ T6125] EXT4-fs (loop5): resizing filesystem from 256 to 0 blocks [ 97.542033][ T6125] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 97.577632][ T39] bond0: (slave netdevsim0): Releasing backup interface [ 97.578917][ T39] bond0: (slave netdevsim0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 97.655901][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.661026][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 98.017099][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.028476][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.030174][ T6083] device bridge_slave_0 entered promiscuous mode [ 98.043330][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.044598][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.046064][ T6083] device bridge_slave_1 entered promiscuous mode [ 98.062794][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.065533][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.075931][ T6083] team0: Port device team_slave_0 added [ 98.077760][ T6083] team0: Port device team_slave_1 added [ 98.089381][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.090419][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.094283][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.107429][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.110828][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.114733][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.166486][ T6083] device hsr_slave_0 entered promiscuous mode [ 98.185693][ T6083] device hsr_slave_1 entered promiscuous mode [ 98.293887][ T6083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.296468][ T6083] Cannot create hsr debugfs directory [ 98.296778][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 98.323125][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 98.751777][ T39] tipc: Left network mode [ 98.872413][ T6186] loop4: detected capacity change from 0 to 128 [ 98.919873][ T6186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.149733][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'. [ 99.740850][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 99.875454][ T6211] loop4: detected capacity change from 0 to 512 [ 99.885824][ T6211] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12 [ 100.355602][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 100.859429][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 100.973278][ T6083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.024935][ T6238] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 101.043179][ T6244] device bond2 entered promiscuous mode [ 101.046548][ T6244] device bridge1 entered promiscuous mode [ 101.100613][ T6083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.132346][ T6253] loop4: detected capacity change from 0 to 2048 [ 101.608716][ T6083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.727557][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.748080][ T6253] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.364: Unrecognised inode hash code 20 [ 101.753221][ T6253] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.364: Corrupt directory, running e2fsck is recommended [ 101.759944][ T6253] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.364: Unrecognised inode hash code 20 [ 101.765687][ T6253] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.364: Corrupt directory, running e2fsck is recommended [ 101.799203][ T6083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.131923][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.136162][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.137826][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.142337][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.162107][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.164859][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.168751][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.169906][ T4777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.173713][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.179390][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.180954][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.182166][ T4777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.183765][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.185996][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.187680][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.189392][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.191291][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.192998][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.948410][ T6263] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 2 in block_group 0 [ 102.954621][ T4323] Bluetooth: hci2: command 0x040f tx timeout [ 103.062004][ T6290] loop6: detected capacity change from 0 to 1024 [ 103.067246][ T6290] ext4: Unknown parameter 'nojournal' [ 103.094181][ T6290] devpts: called with bogus options [ 103.492824][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 103.500220][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.503951][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.506419][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.508230][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.513124][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.515915][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.520539][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.604854][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.606267][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.611061][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.616893][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.618594][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.930286][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.931948][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.935542][ T6083] device veth0_vlan entered promiscuous mode [ 103.937523][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.939030][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.942736][ T6083] device veth1_vlan entered promiscuous mode [ 103.950162][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.951697][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.953131][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.955127][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.958571][ T6083] device veth0_macvtap entered promiscuous mode [ 103.960979][ T6083] device veth1_macvtap entered promiscuous mode [ 103.966813][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.968316][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.969711][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.971188][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.972542][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.975203][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.978030][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.025471][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.027045][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.028398][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.029809][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.032290][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.035927][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.037382][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.038924][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.040408][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.041860][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.044509][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.048319][ T39] device hsr_slave_0 left promiscuous mode [ 104.253972][ T39] device veth1_macvtap left promiscuous mode [ 104.254965][ T39] device veth0_macvtap left promiscuous mode [ 104.255945][ T39] device veth1_vlan left promiscuous mode [ 104.256846][ T39] device veth0_vlan left promiscuous mode [ 104.973961][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 108.395041][ T39] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 108.444591][ T39] bond0 (unregistering): Released all slaves [ 108.766335][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.767889][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.770681][ T6083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.772046][ T6083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.773374][ T6083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.775066][ T6083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.816021][ T4694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.817234][ T4694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.818496][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.829802][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.830956][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.832146][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.924754][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.382'. [ 108.943410][ T6299] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 108.944701][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'. [ 108.999609][ T6299] team0: Port device geneve0 added [ 109.006521][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.244140][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 111.102177][ T6348] netlink: 'syz.6.379': attribute type 10 has an invalid length. [ 111.128769][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.131333][ T6348] team0: Failed to send port change of device bond0 via netlink (err -105) [ 111.132797][ T6348] team0: Failed to send options change via netlink (err -105) [ 111.134218][ T6348] team0: Port device bond0 added [ 111.254849][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.6.384'. [ 111.269280][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.270625][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.288280][ T6352] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 111.348612][ T6352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.510654][ T6350] netlink: 76 bytes leftover after parsing attributes in process `syz.6.384'. [ 111.512112][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.513182][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.514314][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.515315][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.582202][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.6.384'. [ 111.590156][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.591393][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.065991][ T6352] bond3: (slave gretap2): making interface the new active one [ 112.082703][ T6352] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 112.094058][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 112.150091][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.159901][ T6371] net_ratelimit: 5266 callbacks suppressed [ 112.159915][ T6371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.196646][ T6374] binder: 6373:6374 tried to acquire reference to desc 0, got 1 instead [ 112.197110][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 112.203408][ T6374] binder: 6373:6374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.208892][ T6374] binder: 6374 RLIMIT_NICE not set [ 112.209728][ T6374] binder: undelivered transaction 40, fd fixups failed [ 112.213107][ T6374] binder: 6373:6374 async transaction 40 fd fixups failed 29201/-12, line 4667 [ 112.216904][ T6374] binder: undelivered transaction 41, fd fixups failed [ 112.219219][ T6374] binder: 6373:6374 async transaction 41 fd fixups failed 29201/-12, line 4667 [ 112.225083][ T4381] binder: undelivered TRANSACTION_COMPLETE [ 112.226187][ T4381] binder: undelivered TRANSACTION_COMPLETE [ 112.315286][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.398'. [ 112.319353][ T6376] loop4: detected capacity change from 0 to 128 [ 112.369184][ T6297] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.411459][ T6384] device veth3 entered promiscuous mode [ 112.415840][ T6384] bridge1: port 1(veth3) entered blocking state [ 112.420224][ T6384] bridge1: port 1(veth3) entered disabled state [ 112.423431][ T6384] bridge1: port 1(veth3) entered blocking state [ 112.424364][ T6384] bridge1: port 1(veth3) entered forwarding state [ 112.443154][ T6387] device veth5 entered promiscuous mode [ 112.449902][ T6387] bridge1: port 2(veth5) entered blocking state [ 112.450945][ T6387] bridge1: port 2(veth5) entered disabled state [ 112.459367][ T6387] bridge1: port 2(veth5) entered blocking state [ 112.460471][ T6387] bridge1: port 2(veth5) entered forwarding state [ 112.560473][ T6400] device syzkaller0 entered promiscuous mode [ 112.966861][ T6408] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 114.192077][ T5023] bridge1: port 1(veth3) entered disabled state [ 114.197327][ T5023] bridge1: port 2(veth5) entered disabled state [ 114.251208][ T6423] tipc: Enabling of bearer rejected, failed to enable media [ 115.302536][ T6440] loop5: detected capacity change from 0 to 40427 [ 115.774787][ T6440] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 115.777307][ T6440] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.809501][ T6440] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.818456][ T6465] device ip6gre1 entered promiscuous mode [ 115.823360][ T6440] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.825156][ T6440] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.917328][ T6465] netlink: 'syz.6.421': attribute type 6 has an invalid length. [ 115.918644][ T6465] netlink: 'syz.6.421': attribute type 7 has an invalid length. [ 115.923047][ T6465] netlink: 52 bytes leftover after parsing attributes in process `syz.6.421'. [ 116.431296][ T6474] device ipip0 entered promiscuous mode [ 116.446706][ T6482] loop4: detected capacity change from 0 to 512 [ 116.530463][ T6482] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 116.540658][ T6482] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 116.542250][ T6482] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.426: Failed to acquire dquot type 1 [ 116.569503][ T6482] EXT4-fs (loop4): 1 truncate cleaned up [ 116.570486][ T6482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.394641][ T6482] EXT4-fs (loop4): unmounting filesystem. [ 117.474731][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 117.481210][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 117.787993][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 117.790291][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 117.792798][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 117.807827][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 117.813657][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 117.996216][ T6518] ptrace attach of "./syz-executor exec"[4322] was attempted by " [ 118.259311][ T6524] loop0: detected capacity change from 0 to 128 [ 118.393205][ T6530] loop4: detected capacity change from 0 to 8192 [ 118.399207][ T6530] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 119.860642][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 121.772930][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 122.618881][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.450'. [ 123.301372][ T4327] Bluetooth: Wrong link type (-22) [ 123.303144][ T4327] Bluetooth: hci4: link tx timeout [ 123.305057][ T4327] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.329296][ T6581] loop6: detected capacity change from 0 to 1024 [ 123.885754][ T6587] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.896903][ T6587] overlayfs: failed to set xattr on upper [ 123.900002][ T6587] overlayfs: ...falling back to index=off,metacopy=off. [ 123.903539][ T6580] loop5: detected capacity change from 0 to 1764 [ 124.010657][ T6595] loop4: detected capacity change from 0 to 512 [ 124.049080][ T6599] sctp: [Deprecated]: syz.5.460 (pid 6599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.049080][ T6599] Use struct sctp_sack_info instead [ 124.126205][ T6595] loop4: detected capacity change from 0 to 8192 [ 124.447678][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 124.515167][ T6602] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 125.134531][ T6602] netlink: 1032 bytes leftover after parsing attributes in process `syz.5.462'. [ 125.935476][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 125.938813][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939887][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.955230][ T6591] loop6: detected capacity change from 0 to 131072 [ 125.976220][ T6591] F2FS-fs (loop6): invalid crc value [ 126.081348][ T6591] F2FS-fs (loop6): Found nat_bits in checkpoint [ 126.741683][ T6591] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 126.784267][ T6640] binder: 6638:6640 tried to acquire reference to desc 0, got 1 instead [ 126.798939][ T6640] binder: 6638:6640 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 126.801248][ T6640] binder: 6640 RLIMIT_NICE not set [ 126.802076][ T6640] binder: 6640 RLIMIT_NICE not set [ 126.959981][ T22] binder: release 6638:6640 transaction 47 in, still active [ 126.963177][ T22] binder: send failed reply for transaction 47 to 6638:6640 [ 126.964932][ T22] binder: release 6638:6642 transaction 54 out, still active [ 126.966151][ T22] binder: undelivered TRANSACTION_COMPLETE [ 126.967840][ T22] binder: undelivered TRANSACTION_COMPLETE [ 126.969010][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.996241][ T22] binder: send failed reply for transaction 54, target dead [ 127.418767][ T6664] netlink: 'syz.5.480': attribute type 12 has an invalid length. [ 127.420133][ T6664] netlink: 'syz.5.480': attribute type 29 has an invalid length. [ 127.421317][ T6664] netlink: 148 bytes leftover after parsing attributes in process `syz.5.480'. [ 127.765725][ T6675] "syz.6.483" (6675) uses obsolete ecb(arc4) skcipher [ 128.287912][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 128.326037][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 129.475592][ T6716] netlink: 104 bytes leftover after parsing attributes in process `syz.0.496'. [ 129.598700][ T6719] loop0: detected capacity change from 0 to 32768 [ 129.675271][ T6719] XFS (loop0): Mounting V5 Filesystem [ 129.698511][ T6719] XFS (loop0): Ending clean mount [ 129.719358][ T6083] XFS (loop0): Unmounting Filesystem [ 131.043259][ T6754] loop0: detected capacity change from 0 to 128 [ 131.075762][ T6757] loop4: detected capacity change from 0 to 1024 [ 131.077357][ T6757] EXT4-fs: Ignoring removed oldalloc option [ 131.078444][ T6757] EXT4-fs: Ignoring removed bh option [ 131.083326][ T6757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.118347][ T6757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.129146][ T6754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.546708][ T6754] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.500: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 131.589824][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.591821][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.594570][ T6083] EXT4-fs (loop0): unmounting filesystem. [ 132.483508][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.516'. [ 132.962887][ T6765] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.508: Allocating blocks 1-17 which overlap fs metadata [ 132.974973][ T6757] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.508: Allocating blocks 1-17 which overlap fs metadata [ 133.402064][ T6802] device syzkaller0 entered promiscuous mode [ 133.720786][ T6805] loop5: detected capacity change from 0 to 40427 [ 133.725961][ T6805] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 133.727759][ T6805] F2FS-fs (loop5): invalid crc value [ 133.729976][ T6805] F2FS-fs (loop5): Found nat_bits in checkpoint [ 133.767482][ T6805] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 133.784002][ T6805] syz.5.520: attempt to access beyond end of device [ 133.784002][ T6805] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.874369][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 134.091056][ T6822] netlink: 'syz.5.522': attribute type 3 has an invalid length. [ 134.092253][ T6822] netlink: 'syz.5.522': attribute type 1 has an invalid length. [ 134.264092][ T6824] loop6: detected capacity change from 0 to 8 [ 134.366286][ T6297] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.441329][ T6817] loop0: detected capacity change from 0 to 1764 [ 134.487571][ T6662] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.341181][ T6836] loop6: detected capacity change from 0 to 16 [ 135.387150][ T6836] erofs: (device loop6): mounted with root inode @ nid 36. [ 135.401224][ T6836] syz.6.529: attempt to access beyond end of device [ 135.401224][ T6836] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 135.549353][ T6844] loop4: detected capacity change from 0 to 256 [ 135.585000][ T6844] FAT-fs (loop4): Directory bread(block 64) failed [ 135.586221][ T6844] FAT-fs (loop4): Directory bread(block 65) failed [ 135.587461][ T6844] FAT-fs (loop4): Directory bread(block 66) failed [ 135.588525][ T6844] FAT-fs (loop4): Directory bread(block 67) failed [ 135.589735][ T6844] FAT-fs (loop4): Directory bread(block 68) failed [ 135.590884][ T6844] FAT-fs (loop4): Directory bread(block 69) failed [ 135.592119][ T6844] FAT-fs (loop4): Directory bread(block 70) failed [ 135.593289][ T6844] FAT-fs (loop4): Directory bread(block 71) failed [ 135.594489][ T6844] FAT-fs (loop4): Directory bread(block 72) failed [ 135.595592][ T6844] FAT-fs (loop4): Directory bread(block 73) failed [ 136.255497][ T6848] fuse: Bad value for 'fd' [ 136.829078][ T6855] loop6: detected capacity change from 0 to 40427 [ 137.218513][ T6855] F2FS-fs (loop6): Found nat_bits in checkpoint [ 137.243930][ T6855] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 137.250281][ T6870] f2fs_ckpt-7:6: attempt to access beyond end of device [ 137.250281][ T6870] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.824163][ T6883] netlink: 188 bytes leftover after parsing attributes in process `syz.5.542'. [ 138.372580][ T6868] loop4: detected capacity change from 0 to 40427 [ 138.573589][ T6868] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 138.575413][ T6868] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.582150][ T6868] F2FS-fs (loop4): invalid crc value [ 138.600021][ T6868] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.620172][ T6868] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.621409][ T6868] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.739194][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 139.592476][ T6913] tipc: Started in network mode [ 139.594472][ T6913] tipc: Node identity ac1414aa, cluster identity 4711 [ 139.597401][ T6913] tipc: Enabled bearer , priority 10 [ 139.602971][ T6913] tipc: Enabled bearer , priority 0 [ 139.646315][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 139.687125][ T6911] loop0: detected capacity change from 0 to 32768 [ 141.069244][ T4381] tipc: Node number set to 2886997162 [ 141.840928][ T6948] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.561'. [ 142.185013][ T27] audit: type=1326 audit(141.820:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.190872][ T27] audit: type=1326 audit(141.820:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.196916][ T27] audit: type=1326 audit(141.820:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.208608][ T27] audit: type=1326 audit(141.820:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.213280][ T27] audit: type=1326 audit(141.820:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.219356][ T27] audit: type=1326 audit(141.820:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.222633][ T27] audit: type=1326 audit(141.820:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.226559][ T27] audit: type=1326 audit(141.820:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.229837][ T27] audit: type=1326 audit(141.820:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.232809][ T27] audit: type=1326 audit(141.820:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8977368 code=0x7ffc0000 [ 142.818245][ T6968] tipc: Started in network mode [ 142.819066][ T6968] tipc: Node identity 4, cluster identity 4711 [ 142.819902][ T6968] tipc: Node number set to 4 [ 144.247723][ T6999] tipc: Started in network mode [ 144.248599][ T6999] tipc: Node identity 4, cluster identity 4711 [ 144.249621][ T6999] tipc: Node number set to 4 [ 144.252356][ T6995] tipc: Failed to remove unknown binding: 66,0,0/4:561133618/561133619 [ 144.258352][ T6995] tipc: Failed to remove unknown binding: 66,0,0/4:561133618/561133619 [ 144.259834][ T7000] tipc: Failed to remove unknown binding: 66,0,0/4:4277228372/4277228374 [ 144.284456][ T7004] MPTCP: kernel_bind error, err=-98 [ 145.186203][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 146.440428][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 147.452228][ T7063] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 147.455486][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 147.565744][ T7070] netlink: 'syz.6.599': attribute type 1 has an invalid length. [ 147.594764][ T7070] device bond1 entered promiscuous mode [ 147.595812][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.615682][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.599'. [ 147.644960][ T7070] bond1: (slave bridge2): making interface the new active one [ 147.646230][ T7070] device bridge2 entered promiscuous mode [ 147.647583][ T7070] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 147.671657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 148.584803][ T7093] netlink: 'syz.5.603': attribute type 3 has an invalid length. [ 149.347352][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.349741][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.380771][ T7107] netlink: 'syz.0.607': attribute type 4 has an invalid length. [ 149.405125][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.406329][ T7115] team0: Device bond0 failed to register rx_handler [ 149.417438][ T7115] netlink: 'syz.1.610': attribute type 16 has an invalid length. [ 149.418676][ T7115] netlink: 'syz.1.610': attribute type 17 has an invalid length. [ 149.771345][ T7122] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 149.779486][ T7122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.795426][ T7122] bond2: (slave ip6gretap1): making interface the new active one [ 149.797406][ T7122] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.415501][ T7156] loop4: detected capacity change from 0 to 64 [ 152.175457][ T1573] af_packet: tpacket_rcv: packet too big, clamped from 196 to 4294967272. macoff=96 [ 152.990000][ T7183] loop6: detected capacity change from 0 to 1024 [ 153.027400][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.061957][ T7183] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 154.014575][ T4327] Bluetooth: hci1: command 0x0406 tx timeout [ 154.313638][ T4852] EXT4-fs (loop6): unmounting filesystem. [ 154.418470][ T7212] loop6: detected capacity change from 0 to 8192 [ 154.422285][ T7212] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 155.142050][ T4327] Bluetooth: hci4: Malformed Event: 0x48 [ 155.417511][ T7227] loop4: detected capacity change from 0 to 164 [ 155.785160][ T7232] loop6: detected capacity change from 0 to 512 [ 155.825592][ T7232] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 157.285304][ T4852] EXT4-fs (loop6): unmounting filesystem. [ 157.319101][ T7273] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 157.334253][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.345125][ T7280] loop6: detected capacity change from 0 to 1024 [ 157.356083][ T7277] tipc: Enabling of bearer rejected, failed to enable media [ 157.356144][ T7280] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 157.359208][ T7280] EXT4-fs (loop6): orphan cleanup on readonly fs [ 157.361788][ T7280] EXT4-fs error (device loop6): ext4_free_blocks:6221: comm syz.6.660: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.366267][ T7280] EXT4-fs (loop6): 1 orphan inode deleted [ 157.367214][ T7280] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 157.855661][ T7286] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 16: comm syz.6.660: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 158.207170][ T4852] EXT4-fs (loop6): unmounting filesystem. [ 158.315224][ T7296] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 158.340070][ T7296] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 158.973946][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 159.048750][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.059193][ T7304] device bond_slave_0 entered promiscuous mode [ 159.060304][ T7304] device bond_slave_1 entered promiscuous mode [ 159.061236][ T7304] device syz_tun entered promiscuous mode [ 159.062704][ T7304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.069082][ T7304] bond1: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 159.070687][ T7304] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 159.073736][ T7304] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 159.176667][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 159.482448][ T7313] device syzkaller0 entered promiscuous mode [ 159.964009][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 161.605825][ T7352] device syzkaller0 entered promiscuous mode [ 162.387880][ T7360] tipc: Enabling of bearer rejected, failed to enable media [ 163.250217][ T7379] bridge0: port 3(vxlan0) entered blocking state [ 163.251483][ T7379] bridge0: port 3(vxlan0) entered disabled state [ 163.253284][ T7379] device vxlan0 entered promiscuous mode [ 163.303123][ T7383] bond0: (slave bridge0): Releasing backup interface [ 163.407510][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.409737][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.411011][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.412690][ T7383] device bridge_slave_0 left promiscuous mode [ 163.413673][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.722952][ T7383] device bridge_slave_1 left promiscuous mode [ 163.724767][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.786891][ T7383] bond0: (slave bond_slave_0): Releasing backup interface [ 163.828902][ T7383] bond0: (slave bond_slave_1): Releasing backup interface [ 163.891713][ T7383] team0: Port device team_slave_0 removed [ 163.901119][ T7383] team0: Port device team_slave_1 removed [ 163.902272][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.909897][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.912327][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.913536][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.918177][ T7383] bond0: (slave netdevsim0): Releasing backup interface [ 163.959040][ T7383] bond1: (slave gretap1): Releasing active interface [ 163.998569][ T7383] bond2: (slave bridge1): Releasing backup interface [ 164.044678][ T7383] device bridge1 left promiscuous mode [ 164.048837][ T7383] bond3: (slave gretap2): Releasing active interface [ 164.088810][ T7382] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 164.094530][ T7382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.105858][ T7386] team0: Mode changed to "loadbalance" [ 164.112316][ T7387] bond3: (slave ip6gretap2): making interface the new active one [ 164.122619][ T7387] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 164.131610][ T7393] device veth5 entered promiscuous mode [ 164.139400][ T7393] bond3: (slave veth5): Enslaving as an active interface with a down link [ 164.149200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 165.596006][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.6.710'. [ 165.674217][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.710'. [ 168.883164][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.724'. [ 168.899203][ T7497] overlayfs: failed to clone upperpath [ 169.336545][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 169.390730][ T7515] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 169.396602][ T7515] netlink: 'syz.4.730': attribute type 3 has an invalid length. [ 169.450420][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.452877][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.455105][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.457191][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.459369][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.461526][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.463644][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.465970][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.468064][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 169.470144][ T7518] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:52:c4:42:77:fb [ 170.256411][ T7526] loop4: detected capacity change from 0 to 128 [ 170.257874][ T7526] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 170.582662][ T6297] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.703104][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.741'. [ 170.704806][ T7551] netlink: 'syz.6.741': attribute type 30 has an invalid length. [ 170.793216][ T7555] bond1: option mode: unable to set because the bond device has slaves [ 170.796669][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.741'. [ 170.798121][ T7551] netlink: 'syz.6.741': attribute type 30 has an invalid length. [ 170.830232][ T7555] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 170.852093][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 172.262147][ T7593] syz.5.755 uses obsolete (PF_INET,SOCK_PACKET) [ 172.830779][ T7601] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 172.844663][ T7601] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.847759][ T7601] device team_slave_0 entered promiscuous mode [ 172.848753][ T7601] device team_slave_1 entered promiscuous mode [ 172.849752][ T7601] device geneve0 entered promiscuous mode [ 172.851738][ T7601] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.857036][ T7601] bond1: option mode: unable to set because the bond device has slaves [ 172.860936][ T7601] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 174.264922][ T7640] device vxcan1 entered promiscuous mode [ 174.290053][ T7642] tipc: Can't bind to reserved service type 1 [ 174.320781][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 174.325584][ T7645] tipc: Enabling of bearer rejected, failed to enable media [ 174.810139][ T7658] loop4: detected capacity change from 0 to 2048 [ 175.156267][ T7658] EXT4-fs error (device loop4): __ext4_fill_super:5423: inode #2: comm syz.4.773: inode has both inline data and extents flags [ 175.164148][ T7658] EXT4-fs (loop4): get root inode failed [ 175.166271][ T7658] EXT4-fs (loop4): mount failed [ 175.610740][ T7678] netlink: 'syz.5.778': attribute type 1 has an invalid length. [ 175.627892][ T7678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.661161][ T7678] bond1: (slave veth9): Enslaving as an active interface with a down link [ 176.392596][ T7678] device veth1 entered promiscuous mode [ 176.399331][ T7678] device veth1 left promiscuous mode [ 176.404067][ T7678] bond1: (slave vlan3): making interface the new active one [ 176.407817][ T7678] device veth1 entered promiscuous mode [ 176.410381][ T7678] device vlan3 entered promiscuous mode [ 176.411779][ T7678] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 176.416081][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 177.051802][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 177.053288][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 177.115105][ T4323] Bluetooth: hci4: unexpected event 0x48 length: 27 > 3 [ 177.115127][ T4323] Bluetooth: hci4: wrong event for mode 0 [ 177.300956][ T7725] net_ratelimit: 244 callbacks suppressed [ 177.300968][ T7725] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.688207][ T7732] Unable to handle kernel paging request at virtual address ffff70003147bc00 [ 177.702139][ T7732] KASAN: maybe wild-memory-access in range [0xffff80018a3de000-0xffff80018a3de007] [ 177.705784][ T7732] Mem abort info: [ 177.706399][ T7732] ESR = 0x0000000096000006 [ 177.707320][ T7732] EC = 0x25: DABT (current EL), IL = 32 bits [ 177.708490][ T7732] SET = 0, FnV = 0 [ 177.709080][ T7732] EA = 0, S1PTW = 0 [ 177.709761][ T7732] FSC = 0x06: level 2 translation fault [ 177.710527][ T7732] Data abort info: [ 177.711153][ T7732] ISV = 0, ISS = 0x00000006 [ 177.711808][ T7732] CM = 0, WnR = 0 [ 177.712493][ T7732] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020ddb9000 [ 177.713712][ T7732] [ffff70003147bc00] pgd=000000023ea48003, p4d=000000023ea48003, pud=000000023ea47003, pmd=0000000000000000 [ 177.715680][ T7732] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 177.716617][ T7732] Modules linked in: [ 177.717183][ T7732] CPU: 0 PID: 7732 Comm: syz.5.793 Not tainted syzkaller #0 [ 177.718217][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 177.719629][ T7732] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 177.720793][ T7732] pc : ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 177.721724][ T7732] lr : ip_route_output_key_hash_rcu+0xdb8/0x1e38 [ 177.722669][ T7732] sp : ffff800021f46930 [ 177.723245][ T7732] x29: ffff800021f46980 x28: dfff800000000000 x27: 0000000000000001 [ 177.724394][ T7732] x26: 0000000080000000 x25: ffff0000d0964400 x24: ffff0000c95a5020 [ 177.725565][ T7732] x23: 0000000000000000 x22: ffff80018a3de000 x21: ffff0000d4e42000 [ 177.726761][ T7732] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000003 [ 177.727982][ T7732] x17: 1fffe0001e7a2e80 x16: ffff8000082d7e60 x15: 0000000000000002 [ 177.729051][ T7732] x14: 0000000000000005 x13: 0000000000ff0100 x12: 0000000000080000 [ 177.730179][ T7732] x11: 0000000000001f72 x10: ffff80002aed3000 x9 : ffff80018a3de000 [ 177.731345][ T7732] x8 : 1ffff0003147bc00 x7 : ffff8000105d18f8 x6 : 0000000000000000 [ 177.732608][ T7732] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 177.733745][ T7732] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 177.734921][ T7732] Call trace: [ 177.735374][ T7732] ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 177.736273][ T7732] ip_route_output_key_hash+0x1b0/0x300 [ 177.737055][ T7732] ip_route_output_flow+0x3c/0x160 [ 177.737801][ T7732] ipip6_tunnel_bind_dev+0x1a0/0x510 [ 177.738577][ T7732] ipip6_tunnel_init+0xd4/0x584 [ 177.739229][ T7732] register_netdevice+0x4a0/0x160c [ 177.739966][ T7732] ipip6_tunnel_create+0x130/0x330 [ 177.740785][ T7732] ipip6_newlink+0x1f4/0x634 [ 177.741473][ T7732] rtnl_newlink+0x1058/0x1a50 [ 177.742139][ T7732] rtnetlink_rcv_msg+0x698/0xcdc [ 177.742837][ T7732] netlink_rcv_skb+0x218/0x3e8 [ 177.743537][ T7732] rtnetlink_rcv+0x28/0x38 [ 177.744178][ T7732] netlink_unicast+0x60c/0x814 [ 177.744848][ T7732] netlink_sendmsg+0x6f4/0x9c0 [ 177.745496][ T7732] ____sys_sendmsg+0x5c8/0x938 [ 177.746186][ T7732] __sys_sendmsg+0x288/0x374 [ 177.746813][ T7732] __arm64_sys_sendmsg+0x80/0x94 [ 177.747507][ T7732] invoke_syscall+0x98/0x2b4 [ 177.748162][ T7732] el0_svc_common+0x138/0x258 [ 177.748882][ T7732] do_el0_svc+0x58/0x130 [ 177.749467][ T7732] el0_svc+0x58/0x128 [ 177.750025][ T7732] el0t_64_sync_handler+0x84/0xf0 [ 177.750750][ T7732] el0t_64_sync+0x18c/0x190 [ 177.751408][ T7732] Code: d538d089 8b080136 d343fec8 aa1703f4 (387c6908) [ 177.752449][ T7732] ---[ end trace 0000000000000000 ]--- [ 177.889147][ T7732] Kernel panic - not syncing: Oops: Fatal exception [ 177.890005][ T7732] SMP: stopping secondary CPUs [ 177.890651][ T7732] Kernel Offset: disabled [ 177.891235][ T7732] CPU features: 0x080000,000f0097,a65bfea7 [ 177.892059][ T7732] Memory Limit: none [ 178.014099][ T7732] Rebooting in 86400 seconds..